Please support web standard crypto.subtle

[MichaelJCole]

Node.js developed it's own crypto API before the WebCrypto API.

Since then, browsers and the web have standardized implementations around the WebCrypto API standard.

This bug is about Node.js missing support for the WebCrypto standard API and reopens #2833 (from 2015).

Asking 3rd party libraries to implement the WebCrypto standard is not responsible from a security standpoint for a variety of reasons from implementation expertise to malware. It is not responsible to put this onto API end users (developers).

Additionally, a variety of implementation differences (like this one) make compatible implementations buggy and error-prone.

Back in 2015, there were arguments for not supporting the WebCrypto standard in Node 0.12.

Today, committing to not supporting the WebCrypto standard is committing to a lack of responsibility for Nodejs as a secure and standards based platform on the web.

[bnoordhuis]

Largely a duplicate of #19826 from earlier this year. The answer is still 'no'.

Places where gaps in the existing crypto API make emulating WebCrypto hard can be taken into consideration. Asking for WebCrypto to be added to core verbatim? Not on the table.

[MichaelJCole]

LOL, from that issue:

"@bnoordhuis Ben, why you always try to close "WebCrypto-related" issues so fast? What you are scary of? What "plan" did you mean? You have already written code, the only problem it is a Node plugin, not a native module. Or you are suggesting me to write a full-featured PR with the new code? I am really confused with the style you drive Node issues." - @YuryStrozhevsky

[bnoordhuis]

If you don't have anything relevant to say, stay quiet. You just sent email notification to 100+ people.

[MichaelJCole]

@bnoordhuis I do have relevant things to say, as a user of the project Ben. Your heavy-handed and dismissive approach to moderation diminishes the project and the whole community. Just because you are afraid taking responsibility doesn't mean someone else won't step up to it.

What I'm trying to say Ben is that you are on a larger team, and that team can support you through the hard stuff.

[bnoordhuis]

You asked a question and you got an answer. Moderation doesn't factor into it, you just didn't like the answer.

Now stop trying to read the motivations of someone you don't know. You suck at it.

[ryanmurakami]

Locking the conversation. I don't see this conversation becoming productive.