3 ms·
Seems pretty straightforward: If you trust the server, then HTTPS is sufficient. If you don't trust the server, then you shouldn't be doing anything sensitive i
by losvedir 13y ago
Seems pretty straightforward: If you trust the server, then HTTPS is sufficient. If you don't trust the server, then you shouldn't be doing anything sensitive in the browser. If you ever see the decrypted data, then obviously it's there in plain text on the page, and the server can just snap it out with one line of jQuery.