Re:Firefox Send: Free encrypted file transfer service
by simias on Tuesday March 12, 2019 @11:51AM
(#19369383)
Indeed, the website serves you the crypto code but it runs totally on the client so it's perfectly safe and could in no way be backdoored.
More seriously, did they do anything to fix this obvious design flaw? If they want to fish a key they can just serve you a modified JS file and retrieve the key. Unless of course you chose to audit the JS served every time you browse the website.
More seriously, did they do anything to fix this obvious design flaw? If they want to fish a key they can just serve you a modified JS file and retrieve the key. Unless of course you chose to audit the JS served every time you browse the website.