Web-based cryptography is always snake oil

Re:Web-based cryptography is always snake oil by emersion on Sunday June 25, 2023 @05:07AM (#36466259)

Updating is fine as long as it's from a auditable repository with full source code history, and built by a third-party like a distro (or the build is reproducible).

[ Parent | on HN ]

Re:Web-based cryptography is always snake oil by skrebbel on Sunday June 25, 2023 @05:28AM (#36466361)

Who really reads the source code though?

[ Parent | on HN ]

Re:Web-based cryptography is always snake oil by msla on Sunday June 25, 2023 @05:43AM (#36466445)

The idea is that enough people do that if something bad happens, it makes the news, by which I mean Twitter/Mastodon/HN/LWN and so on.

[ Parent | on HN ]

Re:Web-based cryptography is always snake oil by EGreg on Sunday June 25, 2023 @05:56AM (#36466520)

By which time we get this:

https://qbix.com/blog

[ Parent | on HN ]

Re:Web-based cryptography is always snake oil by goodpoint on Sunday June 25, 2023 @05:11AM (#36466280)

A repository with history is not enough. It's easy to circumvent. You need software packages reviewed and signed by trusted parties - aka a traditional Linux distro.

[ Parent | on HN ]