Re: [lamps] S/MIME fix

[Russ Housley <[e-mail]>]

Adam:
> 
> On 5/16/18 4:16 PM, Stephen Farrell wrote:
>> - Designs pre-date web user agent which changes trust model
>> (where's the private key kept? Needs new infrastructure)
> 
> 
> To understand the challenges surrounding what you suggest, you probably want to study the issues surrounding isolated media streams in WebRTC. Start by looking at section 4.3.2.4 of draft-ietf-rtcweb-security, and then read through <https://www.w3.org/TR/webrtc/#isolated-media-streams>.

I see the parallel, and in fact, the biggest problem is the use of HTML that includes a reference to something that is outside the message itself.

> To create an analogous situation for secure email, you'd need to use webcrypto in a way that stored your private key in the browser (inaccessible to the page), and develop web standards that add some affordance for web pages to hand encrypted data to the browser in a way that causes the corresponding unencrypted data to be displayed to the user, but isolated from the web page completely (e.g., rendered into an iframe that the parent cannot inspect).

I am not following you.  I do not see the requirement to do anything with webcrypto.  However, I completely agree with the need to isolate each portion of the multi-part.

Russ