Re:Show HN: End-to-end encrypted email, based in Switzerland
by IgorPartola on Friday May 16, 2014 @06:48PM
(#7758356)
Sure, if you want to break JS the language. JS doesn't have a concept of "here have a variable with data inside of it but you cannot touch it". Ask yourself: "what does 'display' unencrypted data mean?"You are describing a different system entirely from what an HTML renderer + JavasScript engine can do.
[ Parent
| on HN ]
Re:Show HN: End-to-end encrypted email, based in Switzerland
by pcwalton on Friday May 16, 2014 @07:55PM
(#7758627)
> JS doesn't have a concept of "here have a variable with data inside of it but you cannot touch it".
Actually, it does: closures (and WeakMap in ES6 has similar properties). They're pretty foolproof for information hiding, if used properly. (But this is irrelevant to tptacek's point about the security of crypto in JS, of course.)
Re:Show HN: End-to-end encrypted email, based in Switzerland
by IgorPartola on Saturday May 17, 2014 @09:54AM
(#7760118)
I don't think this is what the grandparent is envisioning. Also closures are great until you are able to replace the code that produces them, or read straight from the DOM at the place where you mail client is displaying the decrypted data.