4 ms·
As long as you don't control the JavaScript that handles your keys, they can do whatever they like.
by als0 7y ago
As long as you don't control the JavaScript that handles your keys, they can do whatever they like.
- joering2 7y agoI actually do. I don't use their app, only the website. Their JS files are served from my own webserver so I do know their content. Besides, nothing stops someone super-paranoid to check the JS code upon login before they put their password in.
- deleted 7y ago[deleted]
- desktop-app 7y agoThis case has been handled in ElectronMail. See https://news.ycombinator.com/item?id=22190710 https://news.ycombinator.com/item?id=22190710 for details.