On 07/22/14 13:47, Aymeric Vitte wrote: > I am thinking about these issues since quite some time, unfortunately I > reached the conclusion that you can not secure the code loading.
A humble suggestion: With https, a self signed server certificate, a DANE record of that certificate in DNSSEC and a browser plugin (extended DNSSEC/DANE validator of cz.nic) that validates the DANE record would make code loading from the original site secure against a MitM. That way you could host all your javascript at the site. (but not at the CDN). Now the question becomes: Do the users find a reason to trust peersm with their business. Users are still vulnerable to a NSL delivered at peersm. with regards, Guido Witmond. -- Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at [email protected].
