3 ms·
I already have a proof of concept that works like this but requires no 3rd party servers. My POC chrome extension uses a JavaScript based AES routine to encryp
by mcot2 15y ago
I already have a proof of concept that works like this but requires no 3rd party servers.
My POC chrome extension uses a JavaScript based AES routine to encrypt text with a given user and passphrase. What gets posted to a site is the encrypted text plus the user name plus a unique string that my extension recognizes.
If you have the extension installed it will scan the DOM for text that matches the known pattern and decrypt transparently given that you have the right username/password combo entered in the extensions settings.
All that is left is to share the username/password combo to whomever should view the text via a different channel. I lost interest and didn't extend this to public/private key pair but that is the next logical step. Also, the extension needs a nice UI and maybe some visual cues on the page as to which text was encrypted/decrypted.
Lastly, once the text is decrypted by the extension, theoretically the host site could query for the decrypted text and send it back via ajax. I couldn't find a great solution to this using chromes pathetic api's for extensions.
If anyone is interested in this, just message me.
- _exec 15y agoYour email address is not visible in your profile, please enter it in the 'about' section, the 'email' field is not visible to the public. How can I reach you?
- mcot2 15y agothanks, I didn't know that wasn't public by default. Email address added.
- unicornporn 15y agoSad fact: most users do not access these services using a web browser, they access them through mobile applications controlled by the service provider. Most mobile web browsers doesn't support extensions either. I'm afraid these browser extension solutions might be a solution for the desktop era, which will be long gone soon (if it isn't already). This is the price we pay for simplification and applification. People no longer know their machines.