> One of the applications they suggested is MFA. If you're validating mfa on the client side you are doing it wrong. Agreed. > Unless you have a very specific

> One of the applications they suggested is MFA. If you're validating mfa on the client side you are doing it wrong. Agreed. > Unless you have a very specific usecase,leave the crypto to the tls layer. Agreed. Author should delete that blog post. Normally, I wouldn't suggest that, but since this is dealing with security, it should thoroughly scrutinized, especially since there are so many JS noobs just starting their careers and they might look at this post as best practices.