3 ms·
Yup!, the browser is such a great environment. It's sandboxed to death, easy to use/install, and cross compatible. (Can use any Modern Browser/OS combo). I'd ra
by Anunayj 5y ago
Yup!, the browser is such a great environment. It's sandboxed to death, easy to use/install, and cross compatible. (Can use any Modern Browser/OS combo). I'd rather play games in my browser than install a native app that has wide access to my personal documents.
Not to mention, Web Crypto API is the literal opposite of roll your own crypto. and is SOO much better than someone implementing cryptographic operations on JS. and can have so many use cases. End to End encryption with key stored in browser. (You can have the raw key inaccessible by JS even, only allow decryption/signing). Though I agree there are some APIs that are pretty dumb.
- folkhack 5y ago> Not to mention, Web Crypto API is the literal opposite of roll your own crypto. and is SOO much better than someone implementing cryptographic operations on JS I'm glad someone is pointing this out as I felt like the author didn't even attempt to understand the Web Crypto API assuming an incorrect worst-case scenario.
- saurik 5y agoWebCrypto is "roll your own crypto" as it implements low level algorithms instead of high-level protocols. The issue with rolling your own crypto wasn't "you will implement sha3 incorrectly" it was "you will use an algorithm for authenticated streaming symmetric encryption but accidentally reuse an initialization vector or fail to verify a checksum" or whatever.