Also, check binding signatures for decryption keys. Also, do not always fallback on Web Crypto ECC errors.