3 ms·
Why not add the Stanford Javascript Crypto Library to this, to address the concern mentioned by jabgrabdthrow? https://github.com/bitwiseshiftleft/sjcl https:/
by natch 13y ago
Why not add the Stanford Javascript Crypto Library to this, to address the concern mentioned by jabgrabdthrow?
https://github.com/bitwiseshiftleft/sjcl https://github.com/bitwiseshiftleft/sjcl
I'm not saying that's going to plug all holes but maybe it can be one piece.
- spikels 13y agoAt least today you still have to trust the JavaScript the server sends you. I have heard talk in the past about adding code signing to browsers. Combined with open-source code and a security audit this could potentially offer something approaching the security of a traditional application.