3 ms·
If your browser has access to your private key, and you are running code on someone else's web site to perform cryptographic operations, then it can simply exfi
by MattPalmer1086 3y ago
If your browser has access to your private key, and you are running code on someone else's web site to perform cryptographic operations, then it can simply exfiltrate your private key.
- ryan-c 3y agothe WebCrypto API has an exportable: false option, though the fact that there's no way to serialize a non-exportable key limits the usefulness of this.