I just don't get it: why can't I use `ed25519.sign` without being on secure origin.
The only reason I can think of is: don't allow people to create p2p networks without CA control and approval. I'm talking about this https://github.com/w3c/webcrypto/issues/28 . Because of that requirement, you can't use WebCrypto primitives on http sites.
So I can't implement my own security on network channel (in web app) without first getting approval from Big Guys, who can revoke it at their will.