3 ms·
Curious why in your FAQ at 0bin.net you say: But JavaScript encryption is not secure! Is there something inherently insecure about the JS crypto library y
by sarabande 9y ago
Curious why in your FAQ at 0bin.net you say:
But JavaScript encryption is not secure!
Is there something inherently insecure about the JS crypto library you're using (https://github.com/bitwiseshiftleft/sjcl https://github.com/bitwiseshiftleft/sjcl)?
- e1ven 9y agoI'd imagine it's similar to the arguments at https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2011/august/javascript-cryptography-considered-harmful/ https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...
- tdeitch 9y ago"Javascript Cryptography Considered Harmful" has been posted on here and lays things out nicely, as e1ven mentions. Here's the original discussion: https://news.ycombinator.com/item?id=2935220 https://news.ycombinator.com/item?id=2935220
- sametmax 9y agoJs crypto make the client trust the server. As i host 0bin, i can inject code whenever i want in the page if i change my mind.