A method for providing a secure connection between a web server application originating on a web server having a website domain name and a security device connected to the web server over a network via a host computer, comprising: • connecting to the web server using a browser executing on the host computer over the network; • loading the web server application from the web server into the browser; • executing a browser extension for providing the web server application access to the security device subject to confirming that the web server application may access the security device; the method being characterised in that the confirming that the web server application may access the security device comprises: • authenticating the web server by verifying that the connection is a secure connection established using a digital certificate issued by a trusted root certificate authority; • receiving from the web server a connection key issued by an authorizing organization wherein the connection key is cryptographically linked to the authorizing organization and cryptographically linked to the digital certificate of the web server; • determining whether the connection key presented by the web server is valid by verifying whether the connection key is indicative of that the web server application has been properly authorized to access the security device by the authorizing organization; • if the connection key is valid, allowing the web server application to connect to the security device; and • if the connection key is not valid, denying the web server application the opportunity to connect to the security device. • connecting to the web server using a browser executing on the host computer over the network; • loading the web server application from the web server into the browser; • executing a browser extension for providing the web server application access to the security device subject to confirming that the web server application may access the security device; the method being characterised in that the confirming that the web server application may access the security device comprises: • authenticating the web server by verifying that the connection is a secure connection established using a digital certificate issued by a trusted root certificate authority; • receiving from the web server a connection key issued by an authorizing organization wherein the connection key is cryptographically linked to the authorizing organization and cryptographically linked to the digital certificate of the web server; • determining whether the connection key presented by the web server is valid by verifying whether the connection key is indicative of that the web server application has been properly authorized to access the security device by the authorizing organization; • if the connection key is valid, allowing the web server application to connect to the security device; and • if the connection key is not valid, denying the web server application the opportunity to connect to the security device. • authenticating the web server by verifying that the connection is a secure connection established using a digital certificate issued by a trusted root certificate authority; • receiving from the web server a connection key issued by an authorizing organization wherein the connection key is cryptographically linked to the authorizing organization and cryptographically linked to the digital certificate of the web server; • determining whether the connection key presented by the web server is valid by verifying whether the connection key is indicative of that the web server application has been properly authorized to access the security device by the authorizing organization; • if the connection key is valid, allowing the web server application to connect to the security device; and • if the connection key is not valid, denying the web server application the opportunity to connect to the security device.