Web developers, you want to use Web Crypto ? let the world know !

Dear web developer, web technologist, web curious,
If you have a plan. And if you your plan is about integrating more security in your web development. And if you have been expecting an interoperable library in browsers for managing secret keys, ciphering your users sensitive data, signing a set of data.
This is your time ! This is the time for you to speak loud. 
The W3C standardization work is in the last miles – despite our Cartesian principles, we all know those are usually the longest.
What do we have up to now ? We have :
But we are still missing :
  • some bug review and resolutions on the implementer’s side,
  • Some decision making to clarify bug features in the specification,
  • Some complete set of tests.
So, if you want to have a chance to play with RSA or AES in your web app one day, and if you already have some pending development or experiment, just let us know.
Help to demonstrate some traction from the web developers community. This will definitely motivate browser makers to maintain their efforts on the development and maintenance of the W3C Web Crypto API.
Please, send reference to your projects, crypto wish list, or offer to support the WG operations to the W3C Web Crypto WG public mailing list:public-webcrypto@w3.org.
The open web platform will definitely need you !
arbeitsschema_f

4 comments

  1. We are an IT consulting firm working a provincial government.They have a Web application used by professionals to upload legal document. Prior being uploaded, these documents have to be signed. Currently, it is with Java plugin (Entrust).

    With the deprecation of NPAPI and browser plugin support, we are following the Web Crypto API progress with a lot of interest.

    A plugin free Web application, fully cross browser compatible and free of those dreaded unexpected Java update would be awesome!

    So, please keep the good work and thank you for your efforts making the Web more secure!!

  2. We are an IT consulting firm working a provincial government. They have a Web application used by professionals to upload legal document. Prior being uploaded, these documents have to be signed. Currently, it is with Java plugin (Entrust). With the deprecation of NPAPI and browser plugin support, we are following the Web Crypto API progress with a lot of interest. A plugin free Web application, fully cross browser compatible and free of those dreaded unexpected Java update would be awesome! So, please keep the good work and thank you for your efforts making the Web more secure!!

  3. Hi Adam, Thanks for reacting. We are expecting users to say ‘we need that API’. This will motivate browser makers to progress in their implementations. That kind of feedback is helpful when a WG is in a critical situation, and need inputs from the field to make decision and arbitrate cutting features or not (which is where we are now).

  4. What sort of feedback are you specifically looking for? I’ve been silently following public-webcrypto@w3.org for some time, and I rarely, if ever, see comments from developers about their projects. The last good developer comment I recall was a year ago, talking about user-controlled key management and X.509 support, but it was met with silence. It may be my own personal inexperience with mailing lists, but I’ve been hesitant to speak up.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s