Re:FileKit: An open source end-to-end encrypted cloud storag...
by csande17 on Thursday August 29, 2019 @11:15PM
(#20835693)
I don't think the private methods proposal will help with cryptography at all. The "security" it provides boils down to making it difficult for code outside the class to access the value, like you can already do with closures like this:
It doesn't help at all with side-channel attacks, which are the main reason why it's hard to safely perform cryptographic operations in a just-in-time interpreted language like JavaScript. It also doesn't stop rogue scripts on the same page from pulling the user's passwords/keys right out of the password field, URL bar, localStorage, or wherever else your script gets them from.
[ Parent
| on HN ]
There are no comments on this comment yet.