[Opendnssec-user] Looking for a "cheap" HSM

[Rick van Rein (OpenFortress)]

Hi,

> I still dont get it. I could register a PKCS#11 module on my firefox to communicate with an HSM.
> But that doesnt involve, in any way, linking "john.doe at example.com" authenticated user with a certificate stored on HSM.

I read that Mozilla tries to access the store in which it found a certificate.

> I must be missing something, like a browser addon, special library initialization (not covered by pkcs#11 standard) or something-else, that will tell HSM to get the correct certificate/partition.

It's been to long for me doing this on a browser, too.  Anyone else?

-Rick