4 ms·
> It can, however, easily be read via javascript, so mozilla needs to be trusted in any case. Or you (and some friends from organizations like the EFF and FSF)
by TuringTest 9y ago
> It can, however, easily be read via javascript, so mozilla needs to be trusted in any case.
Or you (and some friends from organizations like the EFF and FSF) can read the source code to see what it does, and even compile it yourself. If you do that, you only need to trust the compiler.
- carussell 9y agoNo, you still need to trust that Mozilla's deployment corresponds to the publicly available release—that they aren't using a version with changes nor have they been breached by an attacker who can change it to sample 1/n transactions.