Daniel Roesler's personal page has a live examples table for WebCrypto support. https://diafygi.github.io/webcrypto-examples/
Without explination he marks several as "Discouraged! Only use for backwards compatibility!". Two of them i am using in my application are RSA-OAEP for encryption, RSASSA-PKCS1-v1_5 for signing. As far as I know they are not broken.
On the other hand ECDSA and HMAC are recommended by him for signing.
Why is no RSA method recommended for encrypting?
So can someone please help me understand the reasoning for marking these methods the way they are?
Is it just that, for example, elliptic curves produce smaller key sizes for the same level of security?
or about potential for missus, or browser implementation?