Recommending GCM for interoperability

[yaronf]

Sec. 18.5.2: the algorithm list includes AES-CBC but not AES-GCM. We think it is time to make the switch, or at least to add GCM as mandatory to implement. Given the audience of this API, the advantage of GCM is that it can be used securely by mere mortals who do not understand the subtleties of integrity protection.

[jimsch]

You are a bit late with this - it would need to be addressed in the next version of the specification as I understand how the W3C process works.

[yaronf]

Understood. I made these comments during the voting process in December, and was told to post them publicly now, for review when the next version comes along.