Re:Show HN: So.ciety, an end-to-end encrypted social network
by nhayden on Wednesday December 03, 2014 @11:32AM
(#8694618)
I wonder if it'd be possible to sign the JS a site serves you, so you know it's unchanged from when you originally got it?
[ Parent
| on HN ]
Re:Show HN: So.ciety, an end-to-end encrypted social network
by nunyabuizness on Wednesday December 03, 2014 @11:47AM
(#8694732)
You can sign it, but then your clients would have to install an extension to verify it.
Re:Show HN: So.ciety, an end-to-end encrypted social network
by handsomeransoms on Wednesday December 03, 2014 @03:09PM
(#8696060)
I think it's theoretically possible to use Service Workers to do this, giving you a TOFU trust guarantee, although I think there are some issues due to the spec-mandated auto-updating of Service Workers every 24 hours.