[apis] Web Cryptography API (Was: Re: [apis] volunteers for spec review / gap analysis

Hi Meida APIs TF guys,

Sorry for this last-minute posting.

Here is the result of my gap analysis.


= Gap Analysis with Web Cryptography API [1] =

* Subscriber Authentication
Using Web Cryptography API, you can implement web applications with multi-factor 
authentication for subscribers

* Device Authentication
You can implement device authentication with Web Cryptography API if underlying 
keyrings are capable of dealing with keys tied to devices. However, note that 
the recommendation has no description about how to deal with such kind of 
"device keys."

* Application Authentication
Web Cryptography API's signing feature can be used to implement app vendor 
validation feature of your app authentication system, which, to be fully 
implemented, requires the help of other standards such as Manifest for Web 
Applications for defining app identity in your system.


I'm looking forward to talking with you tomorrow.


[1] http://www.w3.org/TR/WebCryptoAPI/


Regards,
Yosuke


On 10/24/13 12:46 PM, Yosuke Funahashi wrote:
> Hi Olivier,
>
> On 10/24/13 12:43 AM, Olivier Thereaux wrote:
>> Hello,
>>
>> During the previous teleconference of the Media APIs TF, several of us
>> committed to review specifications which we believe are or will be key to
>> enabling the Use Cases which our TF has been considering.
>>
>> * WebRTC - Giri
>> * Web Storage, Messaging API, Manifest for Web Apps - Sheau
>> * Push API, Server-Sent events - Bin
>> * EME, MSE - Olivier
>>
>> The spreadsheet which we are using to track our gap analysis has more tech
>> which our group would like to analyse:
>> * File API
>> * File API: Writer
>> * Indexed Database API
>> * Web Crypto
>>
>> https://docs.google.com/spreadsheet/ccc?key=0AvACjV6qSvmxdEctdjYwa2JOalZLOG10elE1LVRZNlE#gid=1
>>
>>
>> Please get in touch if you would like to contribute to this gap analysis
>> exercise by reviewing one of the technologies above, or any other existing or
>> new W3C spec you believe is relevant. Expertise in that spec is best, but not
>> necessary.
>
> I will take care of Web Crypto.
>
> Cheers,
> Yosuke
>
>
>> Thank you,
>> --
>> Olivier
>>
>>
>>
>>
>>
>> -----------------------------
>> http://www.bbc.co.uk
>> This e-mail (and any attachments) is confidential and
>> may contain personal views which are not the views of the BBC unless
>> specifically stated.
>> If you have received it in
>> error, please delete it from your system.
>> Do not use, copy or disclose the
>> information in any way nor act in reliance on it and notify the sender
>> immediately.
>> Please note that the BBC monitors e-mails
>> sent or received.
>> Further communication will signify your consent to
>> this.
>> -----------------------------
>>
>

-- 
Yosuke Funahashi
co-Chair, W3C Web and TV IG
Chair, W3C Web and Broadcasting BG
Researcher, Keio Research Institute at SFC
Special Adviser, Tomo-Digi Corporation

Received on Monday, 11 November 2013 15:31:33 UTC