3 ms·
You're right, in order to get the security right, you wouldn't be able to access the decrypted content with javascript. The browser would prevent that from hap
by michaelchisari 15y ago
You're right, in order to get the security right, you wouldn't be able to access the decrypted content with javascript. The browser would prevent that from happening.
Yes, potential functionality would be lost, but that's always part of the trade-off for security.
But I don't think the trade-offs would be detrimental, from a usability standpoint.
- jbri 15y agoFrom a user perspective, how would you identify "safely" encrypted elements, in a way that can't by spoofed by the page rendering a nonencrypted element with appropriate styling?
- michaelchisari 15y agoCould be the same way the browser identifies "safely" implemented HTTPS (ie, popup, icon, etc). A nonencrypted element with appropriate styling would not have the same browser-level indications that an encrypted element had.