Well, I'd never trust the server (and TLS certs are only a step or two above pur... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

wtbob on Feb 25, 2015 | parent | context | favorite | on: Web Cryptography API Examples

Well, I'd never trust the server (and TLS certs are only a step or two above pure snake oil security), but if the server is willing to trust me, then I don't in principle mind decrypting data on its behalf.

jessaustin on Feb 25, 2015 [–]

Never trusting the server seems equivalent to never using an online service. This isn't helpful.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact