1. Web Authentication and other security services
1st Oct 2014 – W3C TAG
Virginie GALINDO

2. W3C Web Crypto status W3C Web Crypto WG is finalizing Web Crypto API
Status : Last Call (exit scheduled on 13th of Oct)
Implementations :
Google: statement and corresponding issue by the Chromium team.
Internet Explorer: Developer documentation for IE11 preview
WebKit: Implementation is tracked as bug , landed in Safari iOS 8
Firefox: Implementation is being tracked under bug

3. W3C Web Crypto next steps
Workshop was held in Mountain view on 10/11 Sept to discuss next steps
70 people, about 40 companies represented, with token security solution vendors (secure element, trusted execution environment and associated servers) , browser makers (mozilla, microsoft, google), service providers (paypal, square, government)

4. W3C Web Crypto next steps
Topics for discussion
Next steps of the Web Crypto API
Dynamic discovery, certificate management, key storage definition, …
Integration of SE and TEE technologies
Which level ?
Authentication
Which service ?

5. W3C Web Crypto next steps
Summary of what was discussed
Chartering of Web Crypto will happen on
Public security interest group

6. Other topics Web Security IG (zzzzz…)
Web credential management (lost in 3 goups…)