Hacker News Reader

Comment by sarabande | Hacker News Reader

Curious why in your FAQ at 0bin.net you say:

    But JavaScript encryption is not secure!

Is there something inherently insecure about the JS crypto library you're using (https://github.com/bitwiseshiftleft/sjcl)?

"Javascript Cryptography Considered Harmful" has been posted on here and lays things out nicely, as e1ven mentions.

Js crypto make the client trust the server. As i host 0bin, i can inject code whenever i want in the page if i change my mind.