Re: Google Browser/FedCM team exploring native APIs for CHAPI

On Sun, Nov 27, 2022 at 6:04 PM ANTHONY NADALIN <nadalin@prodigy.net> wrote:
> Doesn't allow hardware crypto support unless the browsers enable it by implementing CHAPI as far as I'm aware

The Credential Handler API is about registering applications and
routing messages to and from the appropriate applications. CHAPI isn't
a hardware cryptography API.

If what you mean is that you need a first party context to run
hardware crypto, then CHAPI can run in first party mode. Another
expectation with the FedCM interface is that you would be able to
utilize hardware crypto. What am I missing here, sounds like we're
either comparing apples with oranges or that there is a
misunderstanding about how CHAPI works.

-- manu

-- 
Manu Sporny - https://www.linkedin.com/in/manusporny/
Founder/CEO - Digital Bazaar, Inc.
News: Digital Bazaar Announces New Case Studies (2021)
https://www.digitalbazaar.com/

Received on Sunday, 27 November 2022 23:24:14 UTC