> The standardization effort around JOSE, as far as I can tell, is about making the browser a place where you can run crypto. The problem is that the browser i

> The standardization effort around JOSE, as far as I can tell, is about making the browser a place where you can run crypto. The problem is that the browser is not a place where one can safely run crypto. > Don't flip tables, write the jQuery of web crypto. You'll do more good in the long run going with the flow on this one. That's a bit like advising a vegan to invent a better method for slaughtering cattle (n.b.: I am not a vegan and have no problem killing & eating animals). The problem is that no-one who understands security thinks that in-browser crypto is a good or safe idea, and thus no-one who understands security wishes to help it along. It should be stopped, not made slightly less bad.