Re:Paste.sh - client-side encrypted pastebin
by tokenizerrr on Saturday July 13, 2013 @05:28PM
(#6038827)
> How can you do that without SSL? And if you have SSL, why do you need Javascript crypto? Just use the SSL.
This article does not seem to be fully geared towards crypto that is supposed to happen in the client and then never touch the server. In this case all the code is served over HTTPS and the browser does in fact have a CSPRNG (window.crypto) now. Still the article raises a lot of good points.
This article does not seem to be fully geared towards crypto that is supposed to happen in the client and then never touch the server. In this case all the code is served over HTTPS and the browser does in fact have a CSPRNG (window.crypto) now. Still the article raises a lot of good points.