[Webkit-unassigned] [Bug 70404] [EFL] Implement port layer of keygen element.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Nov 5 00:21:02 PDT 2011


--- Comment #21 from Dongwoo Joshua Im <dw.im at samsung.com>  2011-11-05 00:21:01 PST ---
(In reply to comment #20)
> (In reply to comment #19)
> > (In reply to comment #18)
> > > It looks like part of the code is missing -- who is calling fetchPrivateKey(), for example? 
> > 
> > No one calls fetchPrivateKey() function now, because the specification of keygen is not define who use and how to use the private key.
> > But I've made the function because the function is definitely needed to use the private key.
> Could you give some use cases at least (which parts of WebCore or WebKit would need it, for example)? I'm asking because depending on the uses it might be better to store the data using another data structure (and the private key is being stored in plain memory, but I don't know what the other ports do in this regard, so I may be being too paranoid on this one).

When server sent a message which is encrypted by the public key, 
user agent should decrypt this encrypted message using the private key which is stored.

Chrome port use std::vector to store the private keys.
It looks Win port does not store the private keys, IMHO.

There is no guarantee that server will store and use the public key permanently,
(because specification doesn't specify that)
so user agent doesn't need to store the private key in disk rather than in memory.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list