4 ms·
> Other than the in-browser PrivateKey encryption/decryption mechanism, all functionality of WireHub is accessible without JavaScript. But that is done by brow
by jve 3y ago
> Other than the in-browser PrivateKey encryption/decryption mechanism, all functionality of WireHub is accessible without JavaScript.
But that is done by browser, right? So one still must consider trust to wirehub.org to be sure that it is not sending the secret somewhere? But then again, same trust must be considered by hosted solution - trust for the running website code.
- rudasn 3y agoTrust, or no trust, since it's all in the browser you can check for yourself what gets posted to WireHub when you submit the form containing your private key :) Quick edit: you also don't have to provide your private keys, just the public ones. Another edit: actually it's two forms. One that has the public key and password hint that gets posted to WireHub, and one that has the private key, your password and the password hint that's only handled on the client with javascript and never gets submitted. So I do try not to get to your secrets. I even have the form attribute of the private key input set to a non existent form, just in case it does get submitted, that piece of info will stay in the browser.