News for hackers. Stuff that matters.

A comment on An easy way to share files P2P, and how it works. Parent comment

Re:An easy way to share files P2P, and how it works by skymt on Saturday July 06, 2013 @10:27AM (#5998947)
That's a well-known problem with JavaScript crypto: http://www.matasano.com/articles/javascript-cryptography/

The short answer is that so long as the page is loaded entirely over TLS, and the TLS isn't stripped or subverted in any way, it's safe from MITM. Sharefest doesn't currently support TLS, so they would need to set that up prior to enabling end-to-end encryption.

[ Parent | on HN ]
Re:An easy way to share files P2P, and how it works by shacharz on Saturday July 06, 2013 @10:37AM (#5998967)
The P2P crypto is done by the browser. But not doubt that we need to load the entire page and scripts securely securely...
[ Parent | on HN ]