Re: [W3C Web Crypto WG] a post on our API

http://intrepidusgroup.com/insight/2012/09/friday-double-feature-free-rides-and-webcrypto/

I find the use-case somewhat wrong: Inexperienced persons are probably not particularly good creating secure *protocols* which is what WebCrypto actually will be used for.  If you have that experience and knowledge you should be able to use whatever low-level operation that's needed.

However, the people behind Google's http://www.keyczar.org/ project probably agrees with the author.

Personally I see quite a lot of errors in web applications that "only" has to do with flawed authentication logic.

Anders

Received on Monday, 24 September 2012 12:34:27 UTC