3 ms·
If I glean from the landing page correctly, there will be a private key somewhere in the browser e.g. localstorage. This way the sender can encrypt the secret w
by nielsole 3y ago
If I glean from the landing page correctly, there will be a private key somewhere in the browser e.g. localstorage.
This way the sender can encrypt the secret with the public key of the receiver.
Mitm attacks are certainly possible, but eavesdropping is not.
- asadeddin 3y agoYou're correct. While a Mitm is possible, it'll be useless because the actor will have to get access to the private key from the requester'ss browser. They would have to be on the requester's machine