News for hackers. Stuff that matters.

A comment on Open Letter to Mozilla: Bring Back Persona. Parent comment

Re:Open Letter to Mozilla: Bring Back Persona by nickbauman on Thursday December 24, 2015 @04:51PM (#10789685)
Having native code handle something in the browser instead of a thin, easily verifiable javascript widget seems the opposite of a more secure solution.
[ Parent | on HN ]
Re:Open Letter to Mozilla: Bring Back Persona by deno on Thursday December 24, 2015 @06:05PM (#10789865)
You’re missing the point. Emphasis on “in the browser” not “native.”

http://www.extremetech.com/wp-content/uploads/2011/07/firefo...

[ Parent | on HN ]
Re:Open Letter to Mozilla: Bring Back Persona by nly on Thursday December 24, 2015 @06:02PM (#10789857)
No, because javascript puts the server in control of the code being run on the client. It renders the whole thing vulnerable to nasty attacks like spoofing and MITM.
[ Parent | on HN ]