Re: Will the WebCrypto API allow discovery/enumeration of certificates?

On Wed, Jun 24, 2015 at 2:40 PM, Jeffrey Walton <noloader@gmail.com> wrote:
>
> Wouldn't the private key pose the same sort of information leaks?
>

The private key represents a strong fingerprint, and depending on who
provisioned it, MAY represent a public information leak (e.g. if you know
the private key was issued by a particular government entity, you can look
up the public key for that private key and, from there, find the associated
certificate)

But unquestionably the certificates represent additional information above
and beyond that of the key, and that's just not acceptable.