Secure AND Convenient Web Payments

Secure AND Convenient Web Payments seems to be an unobtainable goal.  In fact, there has been major setbacks recently:

Rejection of W3C's tentative project for accessing security hardware from the web:
https://lists.w3.org/Archives/Public/public-webcrypto/2015Jan/0020.html

Exodus from W3C's SysApps:
https://lists.w3.org/Archives/Public/public-sysapps/2014Dec/0000.html

"Outlawing" of NPAPI which have been used forever to enhance browsers:
http://blog.chromium.org/2013/09/saying-goodbye-to-our-old-friend-npapi.html

Yes, there's a Web Payment IG but it doesn't have any [visible] browser vendor
support or a single assigned web browser architect.

It will be hard reaching the goals stated in:
http://www.w3.org/2015/01/banker_payments.pdf

One of the core problems is the lack of recognition of the fact that the web and
native worlds have entirely different characteristics.

As an example access to secure elements works in billions of mobile devices (SIM)
since ages ago, while it has (as shown above) failed on the web.

That is, it might be a better idea looking at "bridging" technologies rather than
(at any cost and time), trying to compete with things that already work.

Sincerely,
Anders Rundgren
WebPKI.org

Received on Tuesday, 27 January 2015 16:29:57 UTC