> On 6 Sep 2015, at 04:28, Timothy Holborn <timothy.holborn@gmail.com> wrote: > > Is there any good reason why <keygen> should no longer be supported? > > I get having alternatives, thinking its good for flexibility and innovation yet bit like religions, conscription of a particular method isn't the best option. > > So I haven't got clarity as to why it needs to be depreciated, regardless of any other emerging alternatives... > > The main security reason given against it was that it uses MD5 and that that creates a huge security hole and that this cannot be changed. All of this is completely dishonest, not least that MD5 is completely irrelevant to keygen, as explained in issue 102 at the whatwg that was immediatly closed though. https://github.com/whatwg/html/issues/102 <https://github.com/whatwg/html/issues/102> Henry > Can someone enlighten me? > > Tim.h. >
Received on Sunday, 6 September 2015 06:36:51 UTC