Signing bill-payments using WebCrypto++

https://mobilepki.org/WCPPSignatureDemo

This scheme could be used for bill payments although the demo only shows
e-government-like stuff.

Primary features;
- No installation of signature plugins, the code is supplied as a part of the RP web.
- The RP cannot [successfully] modify the signature code because it is signed.
- No RP direct access to keys, postMessage() is the only channel

Limitations/hurdles:
- Not possible to use with existing smart cards
- Requires substantial updates of client platforms
- Lots of new things for issuers to cater for

This is an early version that requires Chrome or Firefox beta.

Anders

Received on Tuesday, 18 November 2014 09:04:05 UTC