Add offline mode to prevent unexpected JS code changes
Open
enhancement
- Dominant language
- Go
- Stars
- 11
- Forks
- 2
- PR merge metrics
- No merged PRs in 30d
Description
A problem with web-based crypto is that a MITM attacker could change the JS file and get the user's PGP password.
Prevent this with a "trust on first use" security model: the first time that the webapp is used, the code is cached. When loading again the webapp, check if an updated new version of the code is available, and prompt the user before upgrading.
Contributor guide
Assessment
This issue has not been assessed yet.