Radical changes in digital signing with ID-card via Chrome web browser
Starting this Wednesday (15th of April 2015), Google will update its web browser Chrome. Since Chrome is the most popular web browser in Estonia, the update will also concern a great number of ID-card users and e-service providers.
Chrome version 42 contains radical updates, but the most important change for Estonia is being made in the way the ID-card interacts with the browser during digital signing. To date, the communication between the browser and the ID-card has been conducted in NPAPI technology, but version 42 marks the start of the outphasing of this standard and the introduction of Native Message API.
Chrome version 42 will require end-users to update their ID-software. This must be done at installer.id.ee after Chrome has been updated. If the user does not update ID-card software, an alternative browser or Mobile-ID may be used for digital signing.
Please inform your customer service of the update, so they are able to provide any necessary assistance to your clients.
In order to preserve the functionality of ID-card signing via Chrome, all e-services must support the new signature component. The transition must be made within the four months scheduled for the complete change of Google standards. During the transition period, both old and new technology can be used for signing, provided that the ID-software has been updated in the computer of the end-user. As of the second half of August, Chrome will only allow signing in the new technology.
Please make provisions for this transition in your information systems.
For additional information, please read the blog entry (in Estonian) of the Information System Authority (ISA).