Re:Transfer.sh – Easy file sharing from the command line
by mr_mitm on Tuesday July 06, 2021 @06:37AM
(#27746488)
It does, except it removes a giant advantage of magic wormhole: True end to end encryption requiring only TOFU. The web version downloads JavaScript every time and unless a specific version is somehow pinned by default, you are in principle vulnerable to MitM attacks.
[ Parent
| on HN ]
Re:Transfer.sh – Easy file sharing from the command line
by alephu5 on Tuesday July 06, 2021 @08:02AM
(#27747258)
Host your own version and hash all the JavaScript sources https://www.srihash.org/