Re: crypto-ISSUE-17: Define the scope and API for custom key attributes [Web Cryptography API]

On Fri, Aug 31, 2012 at 5:06 PM, Mountie Lee <mountie.lee@mw2.or.kr> wrote:

> Hi.
> can you suggest how origin authorize keys?
> I'm not clear the authorization process.
>
> regards
> mountie
>

Today, the only way for an origin to access authorize keys:
- It generated the key itself (createKeyGenerator)
- It imported the key itself (createKeyImporter)
- It derived the key itself (createKeyDeriver)
- It was pre-provisioned using out-of-band means that are not specified

IF (and this is still up for discussion) the WG decides to support
multi-origin key access, then, as described by ISSUE-26, it MIGHT support
authorization via keygenerator ( ISSUE-26 -
http://www.w3.org/2012/webcrypto/track/issues/26 )