Hi,

Let's assume our users in their office using Internet explorer to sign some Web Pages using their client certificate imported into the Internet explorer browser (let s assume no other browser is used)

what is a good approach/architecture for validating the client certificate (Internet Explorer), how to send that certificate or the signed form to the server and how do we verify the signature

Should we use smart client approach integrated to the web application or some silverlight or so or is web form/web pages enough to implement this security requirement ?

Thank you