Hacker News Reader

I would really love to see Shortly plus the Stanford Javascript Crypto Library to be able to create encrypted and password-protected serverless pastebins.

http://crypto.stanford.edu/sjcl/

View on HN

Someone posted http://alfg.co/jot/ lower down that uses a javascript implementation of blowfish.

Javascript crypto does not work. The server can the manipulate the JS to send back the text, so it could be server side in first place. And serverside crypto is worse than useless.

Why? This seemed like a good idea to me. I want to be able to decrypt messages sent client-side. My plan was to have a nodejs proxy that gets the data, encrypts it, and then I decrypt client side using this lib. Problem?

If you do not load the any executable code from the network not. It should be Javascript Crypto in the browser does not work.

The problem is of course not specifiy to javascript. It should be "fat client crypto does not work".

Reply on news.ycombinator.com