4 ms·
Yes, web crypto requires trust on the server and is not secure if your threat model includes its compromise (or that of the CA). ProtonMail recognizes this[1] a
by afarah1 2y ago
Yes, web crypto requires trust on the server and is not secure if your threat model includes its compromise (or that of the CA). ProtonMail recognizes this[1] and offers native open source clients. They also try to somewhat reduce the issue by using an SPA for the web client, to reduce fetches from the server.
[1] https://vimeo.com/216747532 https://vimeo.com/216747532 2017 presentation by ProtonMail's CTO saying essentially the above, at 50:41