What web technology allows a website to access a certificate store on my client machine?

Do web browsers allows websites to access certificate stores? Can you configure a browser such as IE to restrict a website from accessing certificate stores?

  • You may be misunderstanding how TLS works and what exactly is exchanged during certificate validation between two TLS-speaking parties. Each party does not need access to other party "trust store" (and they can exist multiple ones, typically per application) they are just exchanging certificate information during the TLS handshake. Have a look at en.wikipedia.org/wiki/Transport_Layer_Security#TLS_handshake for an introduction and tls.ulfheim.net + tls13.ulfheim.net for a more in depth overview. – Patrick Mevzek Jul 3 '19 at 20:35

Do web browsers allows websites to access certificate stores?

No, except in support for client side certificates (and the browser might have an option to always require some user interaction to confirm this), or—for Internet Explorer—ActiveX controls have access to everything the user has access to, this includes their certificate store.

In IE: Internet Options | Security | <Select Level> | Custom Level... | Don't prompt for client certificate selection when no [...]

I.e. IE will always prompt if there is not exactly one matching certificate, and optionally always.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.