Web NFC Security Context?

• From: Anders Rundgren <anders.rundgren.net@gmail.com>
• Date: Sun, 22 Nov 2015 07:25:23 +0100
• To: "Web NFC (W3C)" <public-web-nfc@w3.org>
• Message-ID: <56515FD3.3070208@gmail.com>

Hi Guys,
I have only skimmed the specification so I may surely have missed something...

If you use NFC for things like authentication on Web where a connecting device
holds a key, you want such solutions to be "phish-free".  AFAIK, this requires that
the security context of the requesting Web-page is available to the connecting device.

Is it?

Cheers,
Anders

Received on Sunday, 22 November 2015 06:27:56 UTC