this post was submitted on 14 Sep 2021
56 points (98.3% liked)

Open Source

32665 readers
911 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 0 points 3 years ago (1 children)

it’s about the fact that you’re doing crypto to protect yourself from the server, using code that the server just sent you

Ah, yes, makes sense. Solutions to this may be to use client applications, local storage in browsers or checksumming.

[–] [email protected] 2 points 3 years ago

There are still many issues with that. This stackoverflow discussion shows that it is not really possible to do. Some of the points are irrelevant, but the general takeway is that local storage, caches and all are not designed for security but for performance.

The thing is that the browser is absolutely not designed for this kinds of uses.