<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 2/2/15 10:08, Shane Tomlinson wrote:<br>
</div>
<blockquote
cite="mid:CAO07_nD4=onETG0mT8M5bF24bDsA8doLBo6EAh34CFL8kG0QkQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>My head is spinning, though I'm sure it'll become more
clear as I re-read the threads. One comment from rfk's email
[1] from December:<br>
<br>
> Chris also suggested that the encryption keys may not
need to transit the server at all, but could instead be
communicated from content-server to relier via a client-side
postMessage API. I don't know much about postMessage but it
sounds worth exploring.<br>
<br>
</div>
This is only possible if an iframe is involved somehow. Either
the relier embeds the content server into its page (e.g., the
lightbox flow[2]), or the relier embeds a hidden content server
iframe in its page.</div>
</blockquote>
<br>
This sounds like the general solution that Chris was saying is more
complex than what we would need to make use of user keys in trusted
Desktop code. Am I reading that correctly?<br>
<br>
<div class="moz-signature">-- <br>
<div style="font-family:sans-serif"> <span
style="font-size:18,font-weight:bold">Adam Roach</span><br>
<span style="font-size:12">Principal Platform Engineer</span><br>
<span style="font-size:12"><a class="moz-txt-link-abbreviated" href="mailto:abr@mozilla.com">abr@mozilla.com</a></span><br>
<span style="font-size:12">+1 650 903 0800 x863</span><br>
</div>
</div>
</body>
</html>