Premature Dropping of the "Provider" Concept?

I'm unconvinced that WebCrypto's decision to drop the established cryptographic provider concept actually will prove to be sustainable.

Session-keys and persistent keys have quite different properties, it is only the handle to the private/secret key that unites them in for example Java.

In Java you also have to specify provider when doing private/secret-key operations which I feel is unnecessary.  Shouldn't a key know its provider?

Anders

Received on Thursday, 16 August 2012 06:40:13 UTC