4 ms·
It seems vulnerable to an active MitM - if the attacker is in a position to serve malicious JS that exfiltrates the data from window.location.hash. I think the
by lol768 8y ago
It seems vulnerable to an active MitM - if the attacker is in a position to serve malicious JS that exfiltrates the data from window.location.hash.
I think the scheme is fairly robust against passive interception though.
- woah 8y agoClient side encryption keeps honest companies honest but no more than that