3 ms·
I read that article as explaining why a web application can't do crypto with javascript. As someone that knows almost nothing about browser extensions, can you
by doug11235 14y ago
I read that article as explaining why a web application can't do crypto with javascript. As someone that knows almost nothing about browser extensions, can you elaborate on why one isn't a good idea for chrome?
- mtgx 14y agoI think you could at least have it implemented in NaCl in Chrome, if the Javascript versions fail.
- jlgreco 14y agoThe sections "How are browsers hostile to cryptography?", "What systems programming functionality does Javascript lack?", "What else is the Javascript runtime lacking for crypto implementors" cover issues you would encounter with browser extension cryto.
- doug11235 14y agoI didn't realize extensions were largely javascript. Thanks for the pointers.
- jlgreco 14y agoAh yeah. I believe the usual terminology is such that "extensions" are javascript and "addons" are something native. You could probably do cryto well with an addon.. to the extent that it is possible to do an addon at all properly (honestly I have no idea there).
- sneak 14y agoPresuming you're securing against gmail monitoring, Google in this case would be the eavesdropper/attacker. Google controls the key/cert that allows for Chrome extension updating...