Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Can you clarify "broken"? In this context there is a world of difference between "inaccurately implemented" and "slow".


There's a nice article here:

http://www.matasano.com/articles/javascript-cryptography/

that explains some of the issues with JavaScript-based cryptosystems.


Note: these arguments only apply to JavaScript in a browser (and at that point, apply to virtually any client-side system attempting to somehow protect information from being snooped on by the server that dynamically provides the code to execute on the client <- an idea that should have been preposterous from the start ;P).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: