>
> Encrypt with public key, and decrypt with private key is precisely what
> the WebCrypto spec allows for.
>
well now, i can't break it any more. given how much time i spent verifying
the behaviour, this is frustrating and not a little embarrassing. i have no
explanation for this whatsoever.
on the other issue, i'm a little unhappy that i can't import PKCS1 private
keys, but i accept that it's not necessarily web crypto's job to help
migrate everyone's keys.
...and i've been told that using the same keypair for encryption & signing
is not wise. so consider me educated on that point.
thanks for the feedback everyone.
J