Hacker News Reader

Comment by gkanai | Hacker News Reader

That's my blog. Happy to answer questions if anyone has any. Basically the situation hasn't changed since 2007, sad to say.

View on HN

Longer-term, one of the few rays of light for S. Korea is the work that is just starting around providing JS-based cypto in the browser (i.e. not via a plugin.)

http://www.w3.org/2012/webcrypto/

http://domcrypt.org/

If you are interested in helping to get S. Korea off Active-X, your help in getting WebCrypto developed and standardized is probably the best thing you can do (as a developer.)

(I work for Mozilla but not on DOMCrypt.)

Why wouldn't a stand-alone application or device serve this purpose much better? The requirement of a confirmation code generated by a simple piece of electronics not more sophisticated than a pocket calculator or a mobile app could side-step this completely.

I would say it changed a lot, especially after iPhone was released in Korea. By laws, government websites now have to support multiple browsers and laws, and several banks now offer "Open Banking" which supports Mac and Linux.

The problem is that the law still requires these websites to use "firewall" and "anti-keylogger", so they just implemented those programs for Mac and Linux in NSAPI form. This is still far from "web standard", but at least they are trying. =(

NSAPI is no different than Active-X. It is not solving the central problem of requiring plugins vs. ssl.

Exactly. I am hoping, one day they'd realize it doesn't make sense to waste money writing plug ins for each browser and platform, and just use the standard, but...

Reply on news.ycombinator.com