3 ms·

I think the problem is when using JavaScript crypto instead of TLS, not in addition to. The article should probably address this specifically.

• lloeki 12y ago
  Not just: any attack that can inject arbitrary code in a web page (e.g XSS attacks), and other crypto oriented attack due to lack of serious primitives being available (e.g timing attacks or attacks on the RNG)
  • Tloewald 12y ago
    Sure but I'm not clear on how this would be made worse by in-browser crypto.
    • deleted 12y ago
      [deleted]