Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

While it is a nice idea, I do not see any practical applications.

It requires a receiver who is a) knowledgeable enough to decrypt it using something like openssl and b) have access to the actual private key.

If that's the case it is highly likely that this person is either capable of using something like PGP or facilitate a file upload form on the apparently available website. Both of which are at least as secure and a whole lot more convenient.

Something related to this I would be really interested in would be a way to encrypt a file client-side, in the browser using javascript prior to uploading it (without the need for the user to do special tricks beyond picking a password). So far this only seems remotely possible using something like flash or silverlight.



Javascript is too hostile an environment for crypto. How do you know your js crypto code wasn't modified in transit? You use SSL. Now that you're using SSL why do you need encryption in the js at all?


Whoever thinks someone didn't change the code on the server might also be kidding himself...


I could see it being useful if you aren't sure how to get an encrypted message to some one.

Much encryption can be done in javascript.

https://ziyan.info/2008/10/javascript-rsa/

http://www-cs-students.stanford.edu/~tjw/jsbn/

http://www.beanizer.org/site/index.php/en/Articles/Practical...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: