First Draft Of Web Cryptography API
Written by Alex Armstrong   
Monday, 17 September 2012

The World Wide Web Consortium (W3C),  the body responsible for web standards, has published a working draft of an API designed to improve the security of web apps.

 

The draft has been authored by security specialists from Mozilla and Google and is a specification for a JavaScript API for performing basic cryptographic operations in web applications, such as hashing, signature generation and verification, and encryption and decryption.

It will therefore enable web applications to check a user's identity in more secure ways than are currently possible between browsers and HTTP servers.

Uses for the API include user or service authentication, document or code signing, and the confidentiality and integrity of communications. You can also use the API to think up ad-hoc applications of cryptography within your own apps.

The W3C Web Cryptography Working Group is looking for feedback on:

 

  • developer convenience for managing keys and algorithms;
  • comments on open issues the WG is currently dealing with, highlighted in this working draft;
  • potential missing functionalities to deploy secure web applications.

 

 

w3clogo

More Information

Web Cryptography API

Related Articles

Modifiable encryption

Public Key Encryption

 

blog comments powered by Disqus

 

To be informed about new articles on I Programmer, install the I Programmer Toolbar, subscribe to the RSS feed, follow us on, Twitter, Facebook, Google+ or Linkedin,  or sign up for our weekly newsletter.

 

Banner


Fear And Loathing In the App Store 8 - Apple Takes Down Innovative App
08/10/2014

Programming into the unknown - it is what keeps us all going. The idea that with nothing but some code we can do something that hasn't been done before. In the old days what you did was between you an [ ... ]



Poodle Is A Very Different Sort Of Security Breach
15/10/2014

It seems that security problems come along, like buses, in clumps. The latest is cutely called POODLE but, unlike Heartbleed and Shellshock, this is of a very different nature.


More News

Last Updated ( Monday, 17 September 2012 )
 
 

   
RSS feed of news items only
I Programmer News
Copyright © 2014 i-programmer.info. All Rights Reserved.
Joomla! is Free Software released under the GNU/GPL License.