4 ms·

More interestingly for me, the web crypto api has been enabled by default.

• DCKing 12y ago
  It's nice for speed and the fact that you don't need to use a library any more, bit isn't more secure than JS Crypto was before.
  • acdha 12y ago
    > It's nice for speed and the fact that you don't need to use a library any more, bit isn't more secure than JS Crypto was before. It's a significant improvement in one area: the key storage API. If you use JavaScript crypto, your keys can be read by an attacker who can compromise that code in some way. WebCrypto can't stop that attacker from signing, encrypting or decrypting a message which the attacker has access to but it does prevent the key leaking out, which is often a far more catastrophic event.