Hacker News new | ask | show | jobs
by deathanatos 3394 days ago
> if the servers are compromised someone could send back a fake plaintext.

The server is sending the JS responsible for doing the encryption, no? If the server is compromised, all bets are off. You must trust this third party with your (unencrypted) data, unless you verify the JavaScript each and every time.