I mentioned before that one of the biggest problems with the Web Object Encryption and Signing (WOES) effort was the reliance on Javascript libraries being shipped across the wire from untrusted sources.
Mozilla is now proposing a Javascript Crypto API, which would give Javascript programs access to the crypto engines present in nearly every browser under the sun. Should that some to fruition, it pretty much obviates the need for WOES.
0 comments:
Post a Comment