4 ms·
While your caveat is true for people using this on the client side, what about people using javascript on the server side ? Though its probably best to use C w
by woadwarrior01 17y ago
While your caveat is true for people using this on the client side, what about people using javascript on the server side ?
Though its probably best to use C wrappers to established crypto libraries on the server side, we shouldn't underestimate the ease of use which comes with using pure javascript libraries.
- tptacek 17y agoThere's nothing intrinsically unsafe about serverside Javascript crypto, but there's something practically unsafe about directly using AES anywhere. In the meantime, serverside Javascript as a rule has access to better native AES code. The browser definitely seems like the motivating use case here.