Hacker News Reader

No online key generator is secure regardless if it's client side. You cannot make those types of security guarantees even if you go through audits or whatever. The web site's code could change at any time, or have third-party URLs, etc.

Anyone trusting these types of services are being fooled into a false sense of security. Do NOT use this or any similar online service.

View on HN

Hello and thanks for your comment.

1. All online key generators should be approached with caution, however they can be a practical solution for users who may not be comfortable with offline key generation or lack technical expertise.

2. The code is run on the client-side. I do not have any third party code running - I have removed the Google Analytics code. This setup provides a reasonable level of security for many users. If you are that hardcore you can still use offline key generation but don't discourage users with blanket statements like 'do not use online services'.

Reply on news.ycombinator.com