Re:CBCrypt: Encrypt from the client rather than send passwor...
by admax88q on Tuesday October 06, 2015 @02:30PM
(#10341191)
> is how to trust the JavaScript arriving from the server that it does what it's supposed to do.
This is an orthogonal problem. Something like CBCrypt would solve a real problem we have right now, which is most service providers don't secure their password database correctly.
If a service provider gets hacked to the point that they their javascript is malicious, all your content on that service is probably already pwned.
This is an orthogonal problem. Something like CBCrypt would solve a real problem we have right now, which is most service providers don't secure their password database correctly.
If a service provider gets hacked to the point that they their javascript is malicious, all your content on that service is probably already pwned.