284373 - PSM needs to share smart card pins with 'cooperating' apps

Status: RESOLVED WONTFIX

(Core Graveyard :: Security: UI, defect)

Description

[Robert Relyea]

When you are running multiple Mozilla applications, all using the same smart
card, on the same system, you really only want one password prompt when the
token is inserted.

This bug is to track this issue.

1. The solution needs to be separable (Mozilla apps should be able to operate
independent of the pin cooperation).
2. The solution needs to be secure on multi-user systems (ideally only 
   a. apps needs to be launched from the console, and
   b. apps need to share the same user ID
should be able to participate in this cooperation 
-- minimally at least (b) should be enforced to participate).
3. Pins should be stored as securely as possible-- including encryption of the
pin with a ephemeral key stored on the token it accesses when possible.

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler]]

This would require significant effort and would benefit only a fraction of users, so this isn't something we're going to be working on.