Is it possible to sign a document with a client certificate programmatically in a browser using either java or javascript WITHOUT user intervention ? Could a hacker use this to impersonate a user ?
If not does it mean it is less secure to make client sign a document by delegating to a server than sign on his own machine ?