Differences

This shows you the differences between two versions of the page.

--- chromium-os [2010/12/06 23:16] – cedric
+++ chromium-os [2010/12/06 23:48] – cedric
@@ Line 3: / Line 3: @@
   * people can fully use Chromium OS without needing a Google login (fine);
   * plan to give SSO experience at OpenID relying parties;
+  * user name will be hashd HASH(salt||user@domain.com). Web-based user name may contain characters that are not safe for use on the file system (nice side effect for the security).
 ====== Security ======
@@ Line 8: / Line 9: @@
   * cached data http://www.chromium.org/chromium-os/chromiumos-design-docs/protecting-cached-user-data#Appendix_D_Designs_considered
   * Suspending to RAM works already quite well with dm-crypt:
-    * according to Google no solutions against sophisticated attacks like Cold Boot Attacks on Encryption Keys http://www.chromium.org/chromium-os/chromiumos-design-docs/protecting-cached-user-data#TOC-Suspending-to-RAM, http://citp.princeton.edu/memory/
+    * according to Google no concrete solutions against sophisticated attacks like Cold Boot Attacks on Encryption Keys http://www.chromium.org/chromium-os/chromiumos-design-docs/protecting-cached-user-data#TOC-Suspending-to-RAM, http://citp.princeton.edu/memory/
   * verified boot crypto specification:
     * developer builds do not use a verified boot;
@@ Line 19: / Line 20: @@
   * Google Chromium OS applications for maximum security;
   * possible to install applications from external sources (like Android)
-  * all HTML5 applications
+  * all HTML5-enabled web applications.