3 ms·

So, you're scheme would require the long answer... ;) Which is that it sounds rather complicated (which makes my security-sense go off, but certainly isn't a

So, you're scheme would require the long answer... ;) Which is that it sounds rather complicated (which makes my security-sense go off, but certainly isn't a fatal indictment) and that I'd really need to either do an active evaluation of the system or get several reassurrances that someone else decent (ideally someone much smarter than me) did and it checked out before I'd be remotely comfortable using it or recommending it.

Estragon 15y ago
That's fair enough. I was just pointing out that not every architecture involving in-browser JS crypto suffers from the problems tptacek detailed.
AUmrysh 14y ago
Yeah, we need a crypto library like JQuery where it's open and people can use a common implementation.