2 ms·
No, I think the question is: if you're passing the URLs via email, WhatsApp, or anything else, then if that system is compromised then you've revealed the secre
by SamBam 3y ago
No, I think the question is: if you're passing the URLs via email, WhatsApp, or anything else, then if that system is compromised then you've revealed the secret.
If you trust that system not to be compromised, then you may as well have just sent the secret plain-text.
In what way or in what scenario does this ever grant you MORE secrecy?
- Twisell 3y agoAs per the documentation the secret is never shared unencrypted an the private key to decypher it is never ever in the url. It stay in the receiver local storage.
- rakoo 3y agoThis only means the browser, and the javascript code, are part of the chain. Both of them can also be compromised, have bugs, and leak the secret.