Hacker News new | ask | show | jobs
by DyslexicAtheist 3112 days ago
Without looking deeper into the app ... The WebCrypto standard makes a lot of assumptions in terms of underlying security and is dangerous (if not negligent) without proper security headers (XSS, CSRF, CSP), in place[0]. Since this site positions itself as a security relevant app, mistakes like these are incredibly worrying.

https://securityheaders.io/?q=https%3A%2F%2Fdarkwire.io%2FSk...

1 comments

Thanks for pointing this out. We'll work on getting fixes in ASAP.