Re: [rtcweb] Retransmit: Summary of Alternatives for media keying

[Randell Jesup <[e-mail]>]

On 7/28/2011 5:54 PM, Randell Jesup wrote:
>> (You can also add a browser extension that uses a service that you 
>> trust but that isn't your calling service, and when you're calling 
>> other people with the same extension you can check the fingerprints 
>> in an automated way using that.)
>
> Definitely possible, and adds another largely-independent layer of trust.
>

Replying to myself with something the Mozilla team was thinking about 
(we may come
back with more on this later, after talking to the people here about 
it):  an example of an
independent layer of identity trust would be the just-announced 
BrowserID initiative:

https://browserid.org/

The plan is to move this into the browser itself.

Also see 
http://identity.mozilla.com/post/7616727542/introducing-browserid-a-better-way-to-sign-in

Perhaps the browserid data could be used to facilitate authentication of 
SAS data, for example.

-- 
Randell Jesup
[e-mail]