3 ms·

This is why we need WebAuthn[1] supporting browser-side encryption using passkeys (or any other secure enclave)[2]. Relying on servers to encrypt data for you w

by tazu 3y ago

This is why we need WebAuthn[1] supporting browser-side encryption using passkeys (or any other secure enclave)[2]. Relying on servers to encrypt data for you will be seen as comical 5 years from now. [1]: https://blog.millerti.me/2023/01/22/encrypting-data-in-the-browser-using-webauthn/ https://blog.millerti.me/2023/01/22/encrypting-data-in-the-b... [2]: https://sneakernetsend.com/ https://sneakernetsend.com/

melvyn2 3y ago
For dark-net markets, server-side encryption is already seen as a failsafe rather than a feature, and smart users ALWAYS encrypt client side (PGP). That said, for activities like these, smart users are not necessarily the majority...