News for hackers. Stuff that matters.

A comment on End-to-End Encryption Plugin for Yahoo Mail. Parent comment

Re:End-to-End Encryption Plugin for Yahoo Mail by SilasX on Monday March 16, 2015 @12:20AM (#9209838)
Sure, so long as a) the extension uses a sandboxed one, and b) you can assume your browser and c) extension implementation don't leak iframe information.

It just seems like an unnecessary and avoidable risk.

[ Parent | on HN ]
Re:End-to-End Encryption Plugin for Yahoo Mail by magicalist on Monday March 16, 2015 @03:44AM (#9210279)
It's a cross-domain iframe, so there is no access to it by the page.

Security is subject to browser exploits, that's true, but that has nothing to do with what you were saying above.

[ Parent | on HN ]