4 ms·
http://www.matasano.com/articles/javascript-cryptography/ http://www.matasano.com/articles/javascript-cryptography/
by jannes 15y ago
http://www.matasano.com/articles/javascript-cryptography/ http://www.matasano.com/articles/javascript-cryptography/
- shocks 15y agoThanks for the link, a very interesting read. I've been brainstorming some solutions with a friend and we think that perhaps the problem could present an interesting research project. The idea of digitally signed and verified Javascript, maybe a browser plugin to check these signatures, etc.
- jannes 15y agoThat's an interesting idea, but you still have the problem that essentially everything in the browser can be MITMed. Even SSL isn't really secure. Just look at the recent CA incidents or the BEAST exploit.