WebCrypto Key Discovery Draft

http://www.w3.org/TR/2013/WD-webcrypto-key-discovery-20130108/

Since there are no standards for provisioning "named origin-specific keys", this draft relies on specifically adapted UAs.
There's absolutely nothing wrong with that but I honestly do not see that you need a _standard_ for such use-cases.

I also seems likely that the possible GUI additions for granting key access will have to be pretty customized such as
"By hitting OK you agree to Netflix's trial subscription conditions" presumably including a privacy notice as well.

Although you could having a generic key access GUI preceded by a notice alert, this is probably not how it is
going to be implemented because that would be user-unfriendly.

Anders

Received on Monday, 22 April 2013 03:30:28 UTC