Clik here to view.
>Firefox Bookmarks & History Query API (re)Design
>With the Firefox UI/UX team starting to crank out design ideas for “Places” ( a Mozilla internal name for bookmarks and history) in Firefox 3.7 and 4.0, it’s high time the Places team revamped the...
View ArticleClik here to view.
DOMCrypt API Update 2011-06-01
There has been so much written and discussed online and off about privacy, user control and identity lately. This dovetails nicely with the draft spec for DOMCrypt as a proposed Crypto API for web...
View ArticleClik here to view.
DOMCrypt round up
While I work on the spec for DOMCrypt, I want to make sure to keep the latest information about the status of this API fresh. For the uninitiated, DOMCrypt is a browser window API I have been working...
View ArticleClik here to view.
Use Cases and Apps
A really handy summary of the recent W3C Identity Conference held in Mountain View has been posted: Identity in the Browser Workshop Final Report (Draft) The need for “Identity” crypto APIs never made...
View ArticleClik here to view.
DOMCrypt update: Symmetric API first iteration
I have uploaded the latest DOMCrypt addon, which is version 0.4. It is not reviewed by the Addons team yet. https://addons.mozilla.org/en-US/firefox/addon/domcrypt/versions/?page=1#version-0.4 I have...
View ArticleClik here to view.
JavaScript and crypto
After reading this thought-provoking post: http://www.matasano.com/articles/javascript-cryptography/ I thought I would enumerate some of the concerns raised and try to explain how DOMCrypt handles at...
View ArticleClik here to view.
A Working Group
This week I attended the W3C annual meeting known as “TPAC” in Santa Clara. I went to discuss the possible formation of a “Web Identity Working Group” to begin the process of possibly standardizing...
View ArticleClik here to view.
Countermeasures needed now
When I found out I could choose my own title at Mozilla I was ecstatic. Of course coming up with a good one is another matter, I thought about it for days and days… I thought about my “newbie” place at...
View ArticleClik here to view.
W3C Web Crypto API – First Public Working Draft published
Good news! With a lot of hard work – I want to tip my hat to Ryan Sleevi at Google – the W3C Web Crypto API First Public Working Draft has been published: http://www.w3.org/TR/WebCryptoAPI/ If you...
View ArticleClik here to view.
A “bridge” crypto API
In working on the Web Crypto API specification, the valuable feedback and criticism keeps going back to the main pitfall: DOM malleability. The many attack surfaces in each web page makes handing over...
View Article
