Re: "Signed high-value transactions"

On 10/11/2012 04:46 PM, Anders Rundgren wrote:
> Given the somewhat hard-to-follow discussions on the public-webcrypto list, I think the time has come to outline how applications like the subject line should be architected and what kind of vulnerabilities they would have (in contrast to statically installed applications).
>
> I would also like to see a concrete proposal for accessing existing keys based on system-wide cryptographic sub-systems like featured in Windows and Android.
>
> Although Ryan is the lead editor, it can hardly be his task to do all the work or respond to every question, right?

No any WG member can respond, although it is the job of the editors to 
make sure that comments are taken care of in the spec if the WG gets 
consensus to tackle the issue and the issue is not out of scope as 
regards the charter.

If you would like to see a concrete proposal, I suggest you write it 
yourself. I'm sure the WG would be very happy to see it.

   cheers,
      harry

>
> Anders
>

Received on Thursday, 11 October 2012 20:17:09 UTC