3 ms·
Someone (like gmail) can even do rich text editor for emails and stuff - without compromising security. let's say separate sandbox w/o internet and write access
by out_of_protocol 11y ago
Someone (like gmail) can even do rich text editor for emails and stuff - without compromising security. let's say separate sandbox w/o internet and write access to cookies etc.
load scripts, css, images. show native window (clearly different than anything js can do) with that rich text editor inside. user types message in, system encrypts (and/or signs) the message. regular html page sees the result.
- robryk 11y agoThere is a Chrome extension that does something like that: https://github.com/google/end-to-end https://github.com/google/end-to-end Obligatory warning: it's in an alpha state according to the readme, so you shouldn't use it yet for real.