2 ms·
It does, except it removes a giant advantage of magic wormhole: True end to end encryption requiring only TOFU. The web version downloads JavaScript every time
by mr_mitm 5y ago
It does, except it removes a giant advantage of magic wormhole: True end to end encryption requiring only TOFU. The web version downloads JavaScript every time and unless a specific version is somehow pinned by default, you are in principle vulnerable to MitM attacks.
- alephu5 5y agoHost your own version and hash all the JavaScript sources https://www.srihash.org/ https://www.srihash.org/