Re: [push-api] Message encryption (#130)

Endpoints, yes, I'm not aware of any way to mess up encoding of an ASCII string (which a URL is required to be).  As for the key, the confidentiality of the key is less critical (if you manage to keep the endpoint secret, then your only potential adversary is the push service).  I think that I should add some text regarding serialization here though.  Thanks for the reminder.

---
Reply to this email directly or view it on GitHub:
https://github.com/w3c/push-api/pull/130#issuecomment-151317860