Running "Trusted Code" on the Web?

Premier posting...

I'm working with what some people would call "Security Applications" which for example
includes  Web Payments.  Since the latter essentially is at the same stage as when we started
using the Web some 20 years ago, it surely is a challenge :-)

If you pay in a shop using your "Carte Bancaire" (I'm in France) you put the card in a terminal
provided by a certified vendor of trusted payment terminals, right?

That is, the card is never directly exposed to potentially malicious merchant code.

Now if you rather go to the Web, you'll find that the entire concept "Trusted Code" is missing!
Is this topic in scope for this group?

- Anders

Received on Wednesday, 25 February 2015 14:12:20 UTC