4 ms·
Is there any benefit of doing this on the client side? The message is sent through HTTPS anyway. If HTTPS was compromised, the javascript code signing the mes
by fooyc 13y ago
Is there any benefit of doing this on the client side?
The message is sent through HTTPS anyway.
If HTTPS was compromised, the javascript code signing the message, and the signing key, and everything related to handling the clear text message would be compromised too anyway.
This is redundant with HTTPS, but also useless if HTTPS is MITM.
- StavrosK 13y agoEh, it might be a bit useful if there's a passive adversary on the server. They can read traffic, but not change anything. Pretty unlikely scenario, so it doesn't really buy you much.
- jis 13y agoYour cloud hosting provider can easily be a passive adversary. Altering your data is risky for them (you might notice) so they won't alter your copy of openpgp.js or the public keys you use. But looking at all of your disk and memory and network is something they can do and you would never know. But if the private key is not on the server, they will never be able to decrypt the messages encrypted for you....
- mschuster91 13y agoThis can protect against malicious browser extensions recording POST/GET-transmitted data (toolbars!!!), as the content will be encrypted at that stage. Furthermore, this helps against content disclosure if the server is compromised.
- fooyc 13y agoIf your browser is untrusted, you are doomed. > Furthermore, this helps against content disclosure if the server is compromised. If the server is compromised, openpgp.js is compromised too.
- willvarfar 13y agoPresuming the private key for the messages is not on the server, then old messages will not be compromised. A kind of perfect secrecy for messages.
- fooyc 13y agoNo need to do this on the client side then (that was my point)
- willvarfar 13y agoYou could do the exact same thing on the server, but that's using server's CPU instead of clients?
- manojlds 13y agoForward secrecy with https? https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy https://community.qualys.com/blogs/securitylabs/2013/08/05/c...
- willvarfar 13y agoyeah its often called perfect forward secrecy - PFS - too. http://en.wikipedia.org/wiki/Perfect_forward_secrecy http://en.wikipedia.org/wiki/Perfect_forward_secrecy