Card Payments on the Web. was: State of the WebCrypto API

-Original Message- From: Anders Rundgren [mailto:anders.rundgren@gmail.com] Sent: Monday, October 12, 2015 3:11 AM To: Tony Arcieri Cc: public-web-security@w3.org Subject: Re: State of the WebCrypto API On 2015-10-12 00:13, Tony Arcieri wrote: Why did you start this thread? The W3C i

Re: State of the WebCrypto API

Tony, There are no technical disagreements whatsoever (I once even created a "shim" to cope with IE), but I did indeed take the liberty downplaying the importance of WebCrypto which you characterize as FUD. However, this view of mine is not only an opinion, it is based on hands-on experience wi

Re: State of the WebCrypto API

On Monday, October 12, 2015, Anders Rundgren wrote: > > IE 11 is Microsoft's most recent browser for their currently largest > installed base of Windows. > Why does it still require a workaround? Probably because there's limited > demand for WebCrypto. > Anders, I already explained this to you,

RE: State of the WebCrypto API

640  -Original Message- From: Anders Rundgren [mailto:anders.rundgren@gmail.com] Sent: Monday, October 12, 2015 3:11 AM To: Tony Arcieri Cc: public-web-security@w3.org Subject: Re: State of the WebCrypto API On 2015-10-12 00:13, Tony Arcieri wrote: > > Why did you start this thread?

Re: State of the WebCrypto API

Bonjour, > Le 12 oct. 2015 à 09:10, Anders Rundgren a > écrit : > > On 2015-10-12 00:13, Tony Arcieri wrote: > >> >> Why did you start this thread? > > The W3C is just about to launch two crypto-related WGs: > http://www.w3.org/2015/hasec/2015-hasec-charter.html >

Re: State of the WebCrypto API

> On 12 Oct 2015, at 13:51, Anders Rundgren > wrote: > > On 2015-10-12 13:53, henry.st...@bblfish.net wrote: > >> >> Anders can you please try to be more positive and constructive about your >> posts. > > I consider it constructive asking prospective members of pre-announced WGs to > provi

Re: State of the WebCrypto API

On 2015-10-12 13:53, henry.st...@bblfish.net wrote: Anders can you please try to be more positive and constructive about your posts. I consider it constructive asking prospective members of pre-announced WGs to provide input specifications *before* actually starting in order to not repeat th

Re: State of the WebCrypto API

> On 11 Oct 2015, at 22:37, Tony Arcieri wrote: > > On Sunday, October 11, 2015, Melvin Carvalho > wrote: > I think that would be an over reaction. Perhaps chat to the chair about this. > > IMHO I've not seen anything that crosses the line > > The problem is

Re: State of the WebCrypto API

On 12 October 2015 at 01:33, Jeffrey Walton wrote: > > I agree we should be respectful of other people's point of view. > > Nonetheless, it is hard to understand how people can simply be wrong > about > > the basics again and again. For example, expecting older browsers or > > operating systems t

Re: State of the WebCrypto API

On 2015-10-12 00:13, Tony Arcieri wrote: Why did you start this thread? The W3C is just about to launch two crypto-related WGs: http://www.w3.org/2015/hasec/2015-hasec-charter.html http://www.w3.org/2015/06/payments-wg-charter.html It seems that WebCrypto didn't satisfy a particularly large

Re: State of the WebCrypto API

> I agree we should be respectful of other people's point of view. > Nonetheless, it is hard to understand how people can simply be wrong about > the basics again and again. For example, expecting older browsers or > operating systems to support standards made since their release seems a bit > back

Re: State of the WebCrypto API

On 10/11/2015 05:33 PM, Melvin Carvalho wrote: > > > On 11 October 2015 at 23:08, Tony Arcieri > wrote: > > On Sunday, October 11, 2015, Jeffrey Walton > wrote: > > Telling folks to upgrade to Windows 8 or 10 is just bike > shedding. Its >

Re: State of the WebCrypto API

x On 10/11/2015 10:18 AM, Anders Rundgren wrote: > https://msdn.microsoft.com/en-us/library/dn904640(v=vs.85).aspx > > So apparently Internet Explorer which is the only Microsoft-browser > available for Windows 7-8.X still doesn't support the published > WebCrypto API. Edge does, as do Mozilla

Re: State of the WebCrypto API

>> > Actually, I gave several options, all of which solve this problem: >> > >> > 1) Use this shim: https://github.com/vibornoff/webcrypto-shim >> > 2) Use a more modern browser >> > 3) Use a more modern OS >> >> Two and three are not really solutions, they are simply bikeshedding. > > > That's not

Re: State of the WebCrypto API

On Sun, Oct 11, 2015 at 5:41 PM, Jeffrey Walton wrote: > On Sun, Oct 11, 2015 at 5:08 PM, Tony Arcieri wrote: > > On Sunday, October 11, 2015, Jeffrey Walton wrote: > >> > >> Telling folks to upgrade to Windows 8 or 10 is just bike shedding. Its > >> not a answer > > > > > > Actually, I gav

Re: State of the WebCrypto API

On Sunday, October 11, 2015, Anders Rundgren wrote: > > Well, what I meant is that WebCrypto didn't got top priority. IMO, this > is probably be related to utility. The WebCrypto API uses a feature (promises) that IE11 has no plans to implement, because it's a legacy browser that's doomed to di

Re: State of the WebCrypto API

On 2015-10-11 19:34, Tony Arcieri wrote: On Sun, Oct 11, 2015 at 7:18 AM, Anders Rundgren mailto:anders.rundgren@gmail.com>> wrote: So apparently Internet Explorer which is the only Microsoft-browser available for Windows 7-8.X still doesn't support the published WebCrypto API. Good t

Re: State of the WebCrypto API

On Sun, Oct 11, 2015 at 5:08 PM, Tony Arcieri wrote: > On Sunday, October 11, 2015, Jeffrey Walton wrote: >> >> Telling folks to upgrade to Windows 8 or 10 is just bike shedding. Its >> not a answer > > > Actually, I gave several options, all of which solve this problem: > > 1) Use this shim:

Re: State of the WebCrypto API

On Sunday, October 11, 2015, Melvin Carvalho wrote: > I think that would be an over reaction. Perhaps chat to the chair about > this. > > IMHO I've not seen anything that crosses the line > The problem is the ongoing "gish gallop" of bad arguments such as the one posed in this thread. Anders po

Re: State of the WebCrypto API

On 11 October 2015 at 23:08, Tony Arcieri wrote: > On Sunday, October 11, 2015, Jeffrey Walton wrote: >> >> Telling folks to upgrade to Windows 8 or 10 is just bike shedding. Its >> not a answer > > > Actually, I gave several options, all of which solve this problem: > > 1) Use this shim: ht

State of the WebCrypto API

On Sunday, October 11, 2015, Jeffrey Walton > wrote: > > Telling folks to upgrade to Windows 8 or 10 is just bike shedding. Its > not a answer Actually, I gave several options, all of which solve this problem: 1) Use this shim: https://github.com/vibornoff/webcrypto-shim 2) Use a more modern

Re: State of the WebCrypto API

On 11 October 2015 at 16:18, Anders Rundgren wrote: > https://msdn.microsoft.com/en-us/library/dn904640(v=vs.85).aspx > > So apparently Internet Explorer which is the only Microsoft-browser > available for Windows 7-8.X still doesn't support the published WebCrypto > API. > > The only reasonable

Re: State of the WebCrypto API

On Sun, Oct 11, 2015 at 1:34 PM, Tony Arcieri wrote: > On Sun, Oct 11, 2015 at 7:18 AM, Anders Rundgren > wrote: >> >> So apparently Internet Explorer which is the only Microsoft-browser >> available for Windows 7-8.X still doesn't support the published WebCrypto >> API. > > Good thing Windows 7-

Re: State of the WebCrypto API

Here is a polyfill to use the WebCrypto API on Internet Explorer 11: https://github.com/vibornoff/webcrypto-shim -- Tony Arcieri

Re: State of the WebCrypto API

On Sun, Oct 11, 2015 at 7:18 AM, Anders Rundgren < anders.rundgren@gmail.com> wrote: > So apparently Internet Explorer which is the only Microsoft-browser > available for Windows 7-8.X still doesn't support the published WebCrypto > API. > Good thing Windows 7-8.X users are eligible for a fre

State of the WebCrypto API

https://msdn.microsoft.com/en-us/library/dn904640(v=vs.85).aspx So apparently Internet Explorer which is the only Microsoft-browser available for Windows 7-8.X still doesn't support the published WebCrypto API. The only reasonable conclusion is that WebCrypto is not the "final solution" to cli