Re: origin free key access in web security model from Albert Lunde on 2013-05-01 (public-web-security@w3.org from May 2013)

From: Albert Lunde <atlunde@panix.com>
Date: Wed, 01 May 2013 00:06:42 -0500
To: public-web-security@w3.org
Message-ID: <5180A2E2.30502@panix.com>

On 4/30/2013 10:20 PM, Mountie Lee wrote:
> Hi.
> I'm Member of WebCrypto WG.
> the working group is trying to define crypto related APIs in user agents.
>
> one of my issue is about origin-free key access.

I wouldn't compare the level of security granted by a same-origin policy 
with anything like cryptography.

Web browsers, flash clients, java script libraries, etc. have gotten too 
complicated to draw easy conclusions. And they are a moving target.

Received on Wednesday, 1 May 2013 05:14:09 UTC