On Mon, Dec 14, 2009 at 2:13 PM, Tyler Close <[email protected]> wrote: > For example, the > User Consent Phase and Grant Phase above could be replaced by a single > copy-paste operation by the user.
Any design that involves storing confidential information in the clipboard is insecure because IE lets arbitrary web sites read the user's clipboard. You can judge that to be a regrettable choice by the IE team, but it's just a fact of the world. Adam
