This PR adds a new did:key provider that uses the webcrypto api to generate a key. We use the extractable: false config to secure the private key. This means that the website itself nor any malicious browser extention can not access the private key material.
This enables us to create a DID session that doesn't require and key management from developers. We could simply store the CryptoKeyPair object in IndexedDB automatically.
oed
commented
1 year ago
This PR adds a new
did:keyprovider that uses the webcrypto api to generate a key. We use theextractable: falseconfig to secure the private key. This means that the website itself nor any malicious browser extention can not access the private key material.This enables us to create a DID session that doesn't require and key management from developers. We could simply store the CryptoKeyPair object in IndexedDB automatically.