Re: origin bound key generation

Hi.
thanks for your quick reply.

the certificate issued from CA has the private key pair.

maybe the CA will be origin-A for generating key pair.

for signing document with private key-A,
can be the signing operation initiated from origin-B?

is it belong to secondary feature of TLS handling?

regards
mountie.

On Wed, Aug 22, 2012 at 10:03 AM, Ryan Sleevi <sleevi@google.com> wrote:

> On Tue, Aug 21, 2012 at 5:55 PM, Mountie Lee <mountie.lee@mw2.or.kr>
> wrote:
> > Hi.
> > when I read latest draft API,
> > I have some question.
> >
> > is it possible
> > user-A generate key-A from origin-A
> > and user-A use key-A in origin-B?
>
> Depends on the user agent.
>
> What doesn't depend on the user agent is, as currently specified,
> there is no way for origin-B to request access to key-A from origin-A.
> Nor is there, as currently specified, a way for origin-A to grant
> access to key-A to origin-B proactively (eg: during generation).
>
> >
> > does the key-A is bounded to origin-A?
>
> Absent any collusion of the user agent, yes.
>
> >
> > regards
> > mountie.
> >
> > =======================================
> > PayGate Inc.
> > THE STANDARD FOR ONLINE PAYMENT
> > for Korea, Japan, China, and the World
>

=======================================
PayGate Inc.
THE STANDARD FOR ONLINE PAYMENT
for Korea, Japan, China, and the World