[Bug 26080] New: Remove unsafe named curves from Web Crypto API

https://www.w3.org/Bugs/Public/show_bug.cgi?id=26080

            Bug ID: 26080
           Summary: Remove unsafe named curves from Web Crypto API
           Product: Web Cryptography
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: critical
          Priority: P2
         Component: Web Cryptography API Document
          Assignee: sleevi@google.com
          Reporter: hi@okturtles.com
                CC: public-webcrypto@w3.org

In reference to, and as part of the recommendation received in, bug 25839, I'm
creating this issue to request that:

1. The curves that are listed as unsafe in [1] be removed from the Named
Curves.
2. Safe ones be recommended in their place (like Curve25519)
3. Should any Named Curves be discovered to be unsafe in the future, that they
be deprecated and eventually removed from the spec.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Received on Thursday, 12 June 2014 21:42:55 UTC