News for hackers. Stuff that matters.

A comment on OpenPGPjs has passed an independent security audit. Parent comment

Re:OpenPGPjs has passed an independent security audit by jnbiche on Thursday August 16, 2018 @11:33AM (#17775535)
There was a way to make a permanent site installation on most browsers using HTML5 appcache, which even the web host couldn't update, but that API is deprecated in favor of the service worker's Cache API.

It's not clear to me that the Cache API offers the same level of security guarantee.

[ Parent | on HN ]
Re:OpenPGPjs has passed an independent security audit by tlrobinson on Thursday August 16, 2018 @12:07PM (#17775860)
> It's not clear to me that the Cache API offers the same level of security guarantee.

Last I checked it seemed there wasn’t any way to prevent the service worker itself from being updated.

[ Parent | on HN ]