Re: [liberationtech] Can JavaScript cryptography be trusted? (was: In defense of client-side encryption)

2013-08-15 Thread Francisco Ruiz
Hi Nadim, I read your article for the second time. I'm totally with you. Javascript is code, and therefore it is intrinsically neither more nor less secure than compiled code running on the OS. Sure, one needs to trust that the browser isn't doing funny things, but we need the same kind of trust

Re: [liberationtech] Can JavaScript cryptography be trusted? (was: In defense of client-side encryption)

2013-08-13 Thread Nadim Kobeissi
Quickly adding my blog post on the matter to this thread. Would love to hear discussion regarding it: http://log.nadim.cc/?p=33 NK On 2013-08-13, at 1:58 AM, Tony Arcieri basc...@gmail.com wrote: On Mon, Aug 12, 2013 at 3:07 PM, Ali-Reza Anghaie a...@packetknife.com wrote: I'm sorry but

[liberationtech] Can JavaScript cryptography be trusted? (was: In defense of client-side encryption)

2013-08-12 Thread Tony Arcieri
On Mon, Aug 12, 2013 at 3:07 PM, Ali-Reza Anghaie a...@packetknife.comwrote: I'm sorry but aren't we spending a lot of time conflating code quality, secure coding practices, software distribution, .. with ~JavaScript in a browser~? I think the title of the thread has a lot to do with that.