[WebCrypto.Next] Google input from Anders Rundgren on 2014-12-15 (public-web-security@w3.org from December 2014)

From: Anders Rundgren <anders.rundgren.net@gmail.com>
Date: Mon, 15 Dec 2014 10:48:27 +0100
To: "public-web-security@w3.org" <public-web-security@w3.org>
Message-ID: <548EAE6B.5060907@gmail.com>

http://lists.w3.org/Archives/Public/public-webcrypto-comments/2014Dec/0011.html

   "That is, there is no secure way to expose these legacy hardware devices to a (hostile) web.
    Note I say insecurable because having to resort to prompting the user is fundamentally
    ceding security"

Anders

Received on Monday, 15 December 2014 09:48:57 UTC