3 ms·
Sometimes you don't need the data to be decrypted on the host. Your crypte is still useful if the host doesn't want to decrypt anything. Javascript crypto as a
by gnur 12y ago
Sometimes you don't need the data to be decrypted on the host.
Your crypte is still useful if the host doesn't want to decrypt anything. Javascript crypto as an alternative to SSL makes no sence, an implementation in which the server never gets the plaintext is currently only possible with client side javascript crypto.
- danielweber 12y agoI agree that any discussion of using JavaScript-crypto instead of SSL is nuts and likely a strawman complaint. But just because it's "the best we can do," that doesn't mean it's a good idea. EDIT 1 minute before I made this comment 'tptacek said the fallacy better elsewhere on this page "we really need browser crypto to work, therefore it works"."
- marcosdumay 12y agoJavascript crypto added to SSL is a great way to let your errors insert vunerabilities on an otherwise secure page.