Re:Web-based cryptography is always snake oil
by snowstormsun on Sunday June 25, 2023 @05:57AM
(#36466524)
3. Nice idea! But how will that prevent any pinned script from loading new code by making some request to the server of Eve (simple get request, for example) and running it using something like `eval`. The problem is that the pinned scripts would need to be thoroughly audited, which is hard to do for non-open source compiled/minified Javascript.
[ Parent
| on HN ]
Re:Web-based cryptography is always snake oil
by SheinhardtWigCo on Sunday June 25, 2023 @06:18AM
(#36466653)
True, but that problem applies to "native" apps as well.