Profile

Cover photo
Zach Szafran
Works at Google
Attended Rochester Institute of Technology
Lives in Sunnyvale, CA
1,650 followers|22,799 views
AboutPostsPhotosVideos+1's

Stream

Zach Szafran

Shared publicly  - 
 
 
In work-related news, the Web Crypto API has now advanced to First Public Working Draft.

It was one of the first projects I got involved with when I started at Google, and perhaps the most involved one thus far, now that I'm "editing" it. The goal is "simple" enough, in that it seeks to provide a low-level cryptographic API for Javascript.

Along with other technologies, such as CSP [1]  or HSTS [2], it's, in part, trying to solve the "Javascript Cryptography Considered Hamrful" problem [3].

A secure RNG. Constant-time cryptographic primitives. A secure keystore. These are the sort of fundamentals from which a wide variety of richer applications can emerge. Just look at some of the use cases [4] that finally become possible.

So if you like Javascript, or if you care about crypto, check it out, and send feedback to public-webcrypto-comments@w3.org.

Please note: The API is rough. Very Rough. There's still a huge gap of known issues and missing normative text, and undoubtedly more than a few typos. That said, hopefully this document captures the idea and vision for what we're working on, and with feedback, can actually achieve.

[1] http://www.w3.org/TR/CSP/
[2] http://tools.ietf.org/html/draft-ietf-websec-strict-transport-sec
[3] http://www.matasano.com/articles/javascript-cryptography/
[4] http://www.w3.org/TR/WebCryptoAPI/#use-cases
1
Royce Remer's profile photo
 
I find it comical that this should showed up in my stream right after amber yast's post on Pandora password management fail
Add a comment...

Zach Szafran

Shared publicly  - 
 
56 straight hours in flight/airport, 2 lost luggage and 1 deportation later...
4
Zach Szafran's profile photoMatteo Pirelli's profile photoRoyce Remer's profile photoScott Hamilton's profile photo
10 comments
 
Welcome back?
Add a comment...

Zach Szafran

Shared publicly  - 
6
Joseph Kieffer's profile photoJamie Richard's profile photoZach Szafran's profile photo
3 comments
 
Final stop Zurich. Thanks!
Add a comment...

Zach Szafran

Shared publicly  - 
3
Zach Szafran's profile photo
 
thanks for pointing that out, I corrected the URL, just waiting for the changes to sync
Add a comment...

Zach Szafran

Shared publicly  - 
3
Add a comment...
Have him in circles
1,650 people
Joey Ting's profile photo
Jamie Richard's profile photo

Zach Szafran

Shared publicly  - 
3
Benyamin Tripp's profile photo
 
Mazal Tov !!@!
Add a comment...

Zach Szafran

Shared publicly  - 
4
John Knapp's profile photo
 
Dude, I'm Jealous
Add a comment...

Zach Szafran

Shared publicly  - 
3
Seppo Alaruikka's profile photo
 
"Maintenance versus innovation was a big issue", said the support person. Apparently Google has serious support challenges due to the company nature and size. 
Add a comment...

Zach Szafran

Shared publicly  - 
 
Singly competition 
1
Add a comment...

Zach Szafran

Shared publicly  - 
 
Checkout this subreddit
3
Add a comment...
People
Have him in circles
1,650 people
Joey Ting's profile photo
Jamie Richard's profile photo
Education
  • Rochester Institute of Technology
    Information Security and Forensics, 2006 - 2011
  • Rochester Institute of Technology
    Applied Networking and Systems Administration, 2006 - 2011
Basic Information
Gender
Male
Other names
zms
Work
Occupation
IT Resident at Google
Employment
  • Google
    IT Resident, 2011 - present
  • Cisco Systems, Inc.
    Customer Advocacy Lab Operations, 2010 - 2010
  • Educational Design Resources, RIT/NTID
    Web Developer, 2006 - 2011
  • USA Choice Internet LLC
    Technical Support, 2003 - 2006
Places
Map of the places this user has livedMap of the places this user has livedMap of the places this user has lived
Currently
Sunnyvale, CA
Previously
New York City, NY - Mountain View, CA - Oil City, Pennsylvania - Rochester, NY - San Jose, CA
Zach Szafran's +1's are the things they like, agree with, or want to recommend.
Kindle
market.android.com

The Kindle app puts over a million books at your fingertips. It’s the app for every reader, whether you’re a book reader, magazine reader, o

Enhanced Steam
chrome.google.com

Enhances the Steam Experience

Google Music
market.android.com

Shop music on Android Market and listen instantly using the Google Music app. Google Music is a cloud-powered music player and storage servi

Mint.com Personal Finance - Apps on Android Market
market.android.com

Track, budget, and manage your money with Mint.com for Android. ACCOLADES - See why 7+ million people trust Mint * Android Market Editor's C

Google I/O 2012: Cloud Support
developers.google.com

See how Google used the cloud platform to build TechStop Info, the platform underlying how Google does IT help and support. Real time updati

RoteBetaSoftware.net » Folder Size
www.rotebetasoftware.net

RoteBetaSoftware.net. Beetroot, its good for you. Home; Donations; Forum; Freeware; Contact. Warning: file_get_contents(http://lan.mcdir.ru/

ROM Manager
market.android.com

Must have app for any root user. Make backups, flash ROMs, and own your device. ATTENTION: I have started the rollout of ClockworkMod Recove

Steam - Apps on Android Market
market.android.com

Steam: chat and participate in the Steam community, catch unbeatable Steam sales With the free Steam app for Android, you can participate in

Torque Pro (OBD2 & Car)
market.android.com

Measure BHP, Torque & 0-60 Clear car OBD faults View engine data in Google Earth See what your car is doing in realtime, get OBD fault c

jQuery Tokeninput
loopj.com

Overview. Tokeninput is a jQuery plugin which allows your users to select multiple items from a predefined list, using autocompletion as the

Better Terminal Emulator Pro
market.android.com

Harness the native Linux command-line potential of Android with this Terminal. BTEP is an advanced multi-session Terminal Emulator and SSH c

TV Show Favs - Apps on Android Market
market.android.com

Never miss an episode of your favorite TV Shows again! * Ad supported with free 14 day premium feature trial * * NOTE: You currently cannot

OpenVPN Installer
market.android.com

You need a root device the tun/tap driver and busybox. OpenVPN Installer will try to install openvpn (2.1.1) in /system/xbin or /system/bin

reddit is fun
market.android.com

reddit is fun unofficial(ly fun) reddit client Use reddit.com with a decent interface. Icon by choofins. Additional icons by Matt K. Try th

TUN.ko Installer
market.android.com

TUN.ko installer automates the installation of tun module that is required by VPNs like OpenVPN.

OpenVPN Settings
market.android.com

You need root and the openvpn binary! This release adds some fixes and enhancements. Features: UI similar to Wi-Fi settings; Restart tunne

Vortex Galaxy - Apps on Android Market
market.android.com

Maxelus Galaxy Tetralogy (3/4). YOU CAN FLY in the galactic nebula ! HOW TO OPEN: Home > Wallpaper > LIVE wallpapers > Vortex Galax

ADWLauncher EX
market.android.com

ADWLauncher EX, beyond tweaking your android desktop Check http://www.youtube.com/watch?v=KD5WD-HDagM Highly Customizable Home replacement