W3C Web Crypto WG - status and review

Hi security folks,

Few words on the work which is ongoing in W3C Web Crypto WG [1] .

We are currently designing basic tools to allow developers to design their own applicative security model. Our specifications are relatively stable (and might go for LC in fall) :

-          A Web Crypto usecases informative document https://dvcs.w3.org/hg/webcrypto-usecases/raw-file/tip/Overview.html

-          A draft Web Crypto API specification offering basics primitives to create keys, and perform cryptographic operations https://dvcs.w3.org/hg/webcrypto-api/raw-file/tip/spec/Overview.html

-          A draft Key Discovery API specification offering means to to get handler on a key by name https://dvcs.w3.org/hg/webcrypto-keydiscovery/raw-file/tip/Overview.html

All those deliverables would be delighted to have your review, as security expert or security curious.

Thanks for helping us to tailor an appropriate set of APIs for designing application security models.
Please send your comments to public-webcrypto-comments@w3.org<mailto:public-webcrypto-comments@w3.org?Subject=Re%3A%20webcrypto%20Google%20Summer%20of%20Code%20project&In-Reply-To=%253C517E9D7E.9050702%40privacyfoundation.de%253E&References=%253C517E9D7E.9050702%40privacyfoundation.de%253E>.

Virginie GALINDO
Gemalto
Chair of the Web Crypto WG

[1] W3C Web Crypto WG website http://www.w3.org/2012/webcrypto/