3 ms·
Can you elaborate on the security considerations of this? It seems like you could just as easily say it's more secure because it reduces the attack surface to a
by gundmc 6y ago
Can you elaborate on the security considerations of this? It seems like you could just as easily say it's more secure because it reduces the attack surface to a well-tested program with mature sandboxing.
- desc 6y agoYou mean like the OS is supposed to be?
- bartread 6y agoExactly. The browser becomes (basically) an OS running within the host OS, so s/he's invented a kind of half-cocked virtualisation. There's a joke in there somewhere about turtles all the way down.
- paulgb 6y agoIt goes both ways, the sandboxing means that the app has less access to the OS, but the flip side is that the open web has more access to the app (CSRF, XSS, evil extensions, etc.) Coincidentally, I just published a blog post that touches on this from both sides: https://paulbutler.org/2020/the-webassembly-app-gap/ https://paulbutler.org/2020/the-webassembly-app-gap/