News for hackers. Stuff that matters.
Re:Show HN: Deadrop.us by sneak on Thursday May 24, 2012 @04:14AM (#4017380)
If you have a secured channel to the server (e.g. SSL), then you can just trust the server to encrypt on that end.

It doesn't matter if you are running server-trusted JS crypto in your browser, or server-encrypted data. Either way, the server is dictating the code/algorithms in use, and could backdoor/subvert the encryption.

There are no comments on this comment yet.