4 ms·

Seems useful.

• Breefield 15y ago
  Why not just have users type in a room name and password on creation...no need to set the salt after the fact.
• mtogo 15y ago
  Except that the encryption is handled with javascript (obviously). I wouldn't use this for anything serious.
  • magikarp 15y ago
    Why not? AES has been implemented in javascript half a dozen times.
    • tptacek 15y ago
      And? What is that evidence of?
      • sorbus 15y ago
        That the implementation of an encryption library in Javascript is not a reason to mistrust services which use that library?
        • tptacek 15y ago
          It isn't evidence of that. Implementation in browser JS is in fact a reason to distrust a cryptosystem.
    • mtogo 15y ago
      Okay..? What difference does that make?
      • cranklin 15y ago
        because... the server might send a broken .js therefore forcing your chat client into sending plain text.
        • mtogo 15y ago
          Exactly, that's the point. Or a browser extension. Or various other fun things, see tptacek's conversation above.