Web Authentication and other security services 1st Oct 2014 – W3C TAG Virginie GALINDO
W3C Web Crypto status W3C Web Crypto WG is finalizing Web Crypto API Status : Last Call (exit scheduled on 13th of Oct) Implementations : Google: statement and corresponding issue by the Chromium team. Internet Explorer: Developer documentation for IE11 preview WebKit: Implementation is tracked as bug 122679, landed in Safari iOS 8 Firefox: Implementation is being tracked under bug 865789
W3C Web Crypto next steps Workshop was held in Mountain view on 10/11 Sept to discuss next steps 70 people, about 40 companies represented, with token security solution vendors (secure element, trusted execution environment and associated servers) , browser makers (mozilla, microsoft, google), service providers (paypal, square, government)
W3C Web Crypto next steps Topics for discussion Next steps of the Web Crypto API Dynamic discovery, certificate management, key storage definition, … Integration of SE and TEE technologies Which level ? Authentication Which service ?
W3C Web Crypto next steps Summary of what was discussed https://www.w3.org/Security/wiki/IG/webcryptonext_workshop Chartering of Web Crypto will happen on Public security interest group http://lists.w3.org/Archives/Public/public-web-security/
Other topics Web Security IG (zzzzz…) Web credential management (lost in 3 goups…)