2 ms·
> if the servers are compromised someone could send back a fake plaintext. The server is sending the JS responsible for doing the encryption, no? If the server
by deathanatos 10y ago
> if the servers are compromised someone could send back a fake plaintext.
The server is sending the JS responsible for doing the encryption, no? If the server is compromised, all bets are off. You must trust this third party with your (unencrypted) data, unless you verify the JavaScript each and every time.