2 ms·
I agree with you that browsers help can improve security, in general. (Mozilla tried this with BrowserID/Persona, but failed.) As for your second point, I stil
by dchest 12y ago
I agree with you that browsers help can improve security, in general. (Mozilla tried this with BrowserID/Persona, but failed.)
As for your second point, I still don't understand it :-) It's hard to make something usable without trusting servers in the current browser environment, even if browser vendors cooperate.
- nly 12y ago> It's hard to make something usable without trusting servers in the current browser environment, even if browser vendors cooperate. That's why the solution needs to be built in to web standards like HTTP 2.x and HTML, rather than shimmed in to a javascript library. The original HTTP authentication scheme actually did one thing right, and that was bypassing HTML and Javascript (where any hope of security and privacy is long dead and buried) and going straight to the browser UI.