3 ms·
A signed app is only more secure if they load absolutely no code remotely, otherwise they open up the same channels of attack. That said, at least they have th
by swsieber 9y ago
A signed app is only more secure if they load absolutely no code remotely, otherwise they open up the same channels of attack.
That said, at least they have the option of closing that hole with the electron app.
- lambda 9y ago> A signed app is only more secure if they load absolutely no code remotely Which they don't. That's why it's not a web app.
- JepZ 9y agoActually, an electron app is very close to the security model of a browser. The fact that they do not load code intentionally, does not solve the problem that electron is able to execute injected javascript.
- baby 9y agoyou get rid of any CSRF from the get go.