News for hackers. Stuff that matters.

A comment on OpenPGPjs has passed an independent security audit. Parent comment

Re:OpenPGPjs has passed an independent security audit by syoc on Thursday August 16, 2018 @11:31AM (#17775513)
Have a look at https://w3c.github.io/webappsec-subresource-integrity/
[ Parent | on HN ]
Re:OpenPGPjs has passed an independent security audit by tlrobinson on Thursday August 16, 2018 @11:46AM (#17775661)
That’s a start, but if the main resource (the HTML page) can be modified it doesn’t help.

If you could require the root page be cryptographically signed (but by who?) and optionally prompted for updates then we’re talking.

[ Parent | on HN ]