4 ms·
My intuition is that if you wanted to (you probably shouldn't) you could implement reasonably secure client side crypto with WASM. Also correct me if I'm wrong
by errantspark 7y ago
My intuition is that if you wanted to (you probably shouldn't) you could implement reasonably secure client side crypto with WASM. Also correct me if I'm wrong but even in 2011 you could "securely erase" data in the browser by operating on typed arrays.
WebCrypto helps by providing a cryptographically secure RNG, that's not nothing.
FWIW I'm not trying to say the gist of the article isn't spot on, but I think the tools are more or less there these days to do the thing, even if it is absurdly easy to mess it up and there's no real good reason to try.