3 ms·
I like the intent of this! My main question is, how do we know redact.ws won't suddenly serve different Javascript one day, to certain clients, which send unenc
by EGreg 4y ago
I like the intent of this! My main question is, how do we know redact.ws won't suddenly serve different Javascript one day, to certain clients, which send unencrypted payloads somewhere?
- cracked-behem 4y agoThe redact server is an open source application that runs locally on the client.
- EGreg 4y agoHow does a server run on the client? It runs on localhost! Right? It can show the user their own info back to them in iframes?
- pcthrowaway 4y agoI'm not the creator of redact, but it sounds like you're under the impression that the iframe src is redact.ws in which case I'd understand your concern. My assumption is that the iframe src would be the local redact server, which would keep things as secure as the package the user installed (though there could be compromises at the network level I suppose)
- cracked-behem 4y agoExactly. This section on the website should explain it with some more detail: https://redact.ws/how-it-works#client https://redact.ws/how-it-works#client