3 ms·
They actually mention this in the "drawbacks" section of the project page: >Won't protect against Man-in-the-middle attacks (eg. javascript substitution) I th
by mistercow 15y ago
They actually mention this in the "drawbacks" section of the project page:
>Won't protect against Man-in-the-middle attacks (eg. javascript substitution)
I think it is pretty much the case that anything that works as man-in-the-middle will also work if an endpoint is compromised.
- gvb 15y agoIf you did not trust the supplied server, you can host the javascript (including the support libraries) on a server you control (and, theoretically, can trust) by making your own web site. I would expect it to be pretty simple to store the data on your server or on a third party server, e.g. S3.