4 ms·
I'm as wary of Javascript as anyone - in fact, your first sentence is practically a verbatim quote from my first post on the host-proof idea. However, I don't t
by cortesi 16y ago
I'm as wary of Javascript as anyone - in fact, your first sentence is practically a verbatim quote from my first post on the host-proof idea. However, I don't think that there needs to be a superstitious dread about this - it just means we have to think harder, work more carefully, and perhaps encourage some changes by browser creators in the longer term.
- tptacek 16y agoYou're as wary of JS as anyone. Browsers themselves may need to change to admit to your solution. But you'll advertise it as secure today.
- cortesi 16y agoBrowser changes can make things more convenient, but we have all the tools to create secure though somewhat cumbersome host-proof applications today. Yes, the Javascript environment sucks, but it's what we have - dismissing the possibility that we can do secure crypto with strictly controlled input, where all components are verified, is not reasonable and not backed up by evidence.