Re:Tanker: End-to-End Encryption SDK for JavaScript
by y96V89C668e7Q74 on Wednesday May 22, 2019 @02:44PM
(#19984167)
That doesn't make it any less secure, there are plenty of open source cryptography libraries and apps like Signal. Closed source doesn't equate to secure.
[ Parent
| on HN ]
Re:Tanker: End-to-End Encryption SDK for JavaScript
by chrismeller on Wednesday May 22, 2019 @04:06PM
(#19984927)
I don’t think I said any of those things?
Crypto happening in the browser (or any browser-based “app”) is not ever going to be ok from a dozen different security perspectives. That makes Node the only possible platform where it makes sense, and that’s what I said.
Re:Tanker: End-to-End Encryption SDK for JavaScript
by y96V89C668e7Q74 on Wednesday May 22, 2019 @05:07PM
(#19985507)
> is not ever going to be ok from a dozen different security perspectives.
What dozen perspectives?
> Any of the other examples can easily be decompiled or reversed. reply ... I don’t think I said any of those things?
Sorry, I interpreted "decompiled or reversed" as insecure. I'm curious why there's a problem if the frontend code can be reversed? Or another way to ask this is, how is that any different from an open source app?