3 ms·
That's a well-known problem with JavaScript crypto: http://www.matasano.com/articles/javascript-cryptography/ http://www.matasano.com/articles/javascript-crypto
by skymt 13y ago
That's a well-known problem with JavaScript crypto: http://www.matasano.com/articles/javascript-cryptography/ http://www.matasano.com/articles/javascript-cryptography/
The short answer is that so long as the page is loaded entirely over TLS, and the TLS isn't stripped or subverted in any way, it's safe from MITM. Sharefest doesn't currently support TLS, so they would need to set that up prior to enabling end-to-end encryption.
- shacharz 13y agoThe P2P crypto is done by the browser. But not doubt that we need to load the entire page and scripts securely securely...