Skip to content
This repository has been archived by the owner on Apr 2, 2024. It is now read-only.

HTML5 Storage Security issues #97

Closed
quemquis opened this issue Aug 4, 2013 · 2 comments
Closed

HTML5 Storage Security issues #97

quemquis opened this issue Aug 4, 2013 · 2 comments

Comments

@quemquis
Copy link

quemquis commented Aug 4, 2013

Not an issue per se, but I wanted to post a link to an interesting post about security issues with HTML5 storage.
https://blog.whitehatsec.com/web-storage-security/

And this paper also delves into this issue
http://www.cs.berkeley.edu/~devdatta/papers/w2sp10-primitives.pdf

Anyway, congrats on a great plugin and please continue this much needed work.

@niklasfemerstrand
Copy link
Owner

Yeah, this is partially why these things exist:

https://github.com/qnrq/rc_openpgpjs/tree/master/pygpghttpd
#73
#64

Also see this for more info: http://qnrq.se/solving-the-browser-crypto-problem/

Working example here: https://github.com/qnrq/rc_openpgpjs/blob/master/pygpghttpd/example/example.htm

Cheers :-) Unfortunately I don't have as much time to spend on this project currently as I would like, but soon I will. I might just spend a couple of allnighters the coming week and be done with most issues in the project. I reckon I can sort out most things pretty quickly as long as my dopamine levels are properly regulated.

@quemquis
Copy link
Author

quemquis commented Aug 5, 2013

Thanks for the links. I'll take a look.

I imagine you're quite busy and all I can say is thank you for taking the time to contribute freely to what I believe to be a very important project.

I hope your dopamine levels get properly regulated soon and you find the time and motivation to continue working on this.

Thanks again and good luck

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants