News for hackers. Stuff that matters.

A comment on Show HN: Read Wikipedia privately using homomorphic encryption. Parent comment

Re:Show HN: Read Wikipedia privately using homomorphic encry... by sedatk on Wednesday June 08, 2022 @07:26PM (#31675787)
> As a real product, you’d probably want to distribute a signed client executable (or Electron app) since otherwise, a malicious server could simply deliver bad client JS on the fly.

Arguably, a malicious server could deliver a bad executable too.

[ Parent | on HN ]
Re:Show HN: Read Wikipedia privately using homomorphic encry... by blintz on Wednesday June 08, 2022 @08:20PM (#31676195)
Yeah, I mean you generally have to go with trust on first use at some point. You can also do code signing, check hashes, build from source, compare multiple sources, etc. All the standard software supply chain security measures.
[ Parent | on HN ]