elliot_crane@lemmy.worldtoOpen Source@lemmy.ml•Staticrypt: Password protect a static HTML page, decrypted in-browser in JS with no dependency. No server logic needed.
113·
2 months agoThis seems like a cool idea, but also somewhat questionable from a security standpoint? Isn’t distributing the encrypted content alongside the means to decrypt it (i.e. bundling this all in one file which is sent to the client) essentially equivalent to providing physical access to an encrypted drive? Like an attacker with enough time and effort could bypass the encryption.
Yep, definitely situational depending on your risk model/tolerance; pretty cool idea nonetheless.