Re: Call for adoption - use case for "Trusted application, untrusted intermediary"

On 28/11/2018 0:29, Eric Rescorla wrote:
>     [BA] The use case does not say that encryption keys are accessible
>     to the JS.
>     N26: "the browser must be able to obtain e2e keying material so as
>     to enable content to be rendered."
> Hmm... Would people be willing to modify this requirement to say that 
> the JS MUST NOT have e2e keying material?

My vote would be no for that.

Best regards


Received on Wednesday, 28 November 2018 09:04:39 UTC