|
|
|
|
|
by jerematasno
3981 days ago
|
|
If the server cannot be trusted, it will extract your encrypted data, since it serves up the code. The server, if compromised/subpoenaed, merely needs to serve you some JavaScript that sends home the encryption key, and your data is no longer just your data. |
|
It's OK to improve security incrementally. Better security is the path to the best security.