3 ms·
> First, if my application encrypts something, such as if my browser encrypts traffic, then the layers beneath it cannot access the data (without intentionally
by ForHackernews 8y ago
> First, if my application encrypts something, such as if my browser encrypts traffic, then the layers beneath it cannot access the data (without intentionally hacking the application).
If your browser is running on an operating system when it applies the encryption, then yes, you are indeed trusting that OS.
- inlined 8y agoThis. Many security systems protect you laterally and from layers above you. Layers below can still be vulnerable (e.g. non-standard openSSL library in the exception case, keyloggers in kernel space, etc)
- greenleafjacob 8y agohttps://en.wikipedia.org/wiki/Protection_ring https://en.wikipedia.org/wiki/Protection_ring