4 ms·

Could it be done with a browser extension?

• CiPHPerCoder 7y ago
  You'd think, but everyone I know that explored this option ended up just implementing desktop software instead (e.g. with Electron).
  • tptacek 7y ago
    Part of that is because by the time you're asking an ordinary user (not a super-opinionated "sophisticate" on HN) to install a Chrome extension, you're 95% of the way towards getting them to install a desktop application anyways, and that remaining 5% of effort is often worth the extra flexibility the Electron app gets you.
• pjc50 7y ago
  You need the opposite of an extension, because in-browser crypto is incompatible with having any other "untrusted" extension. What you need is something with a reduced but secure feature set.
• michaelchisari 7y ago
  Ideally, it would be something the browser supported internally (without external js or plugins) with very minimal javascript entrypoints to decode/encode.
• _rlx_ 7y ago
  This is what the webext-signed-pages [1] extension does. This only works in a secure manner with Firefox though because Chrome extensions don't have access to the content of the HTTP responses [2]. [1] https://github.com/tasn/webext-signed-pages https://github.com/tasn/webext-signed-pages [2] https://bugs.chromium.org/p/chromium/issues/detail?id=487422 https://bugs.chromium.org/p/chromium/issues/detail?id=487422