emersion / emersion/webpass

Add offline mode to prevent unexpected JS code changes

Open
#1 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
11
Forks
2
PR merge metrics
No merged PRs in 30d

Description

A problem with web-based crypto is that a MITM attacker could change the JS file and get the user's PGP password.

Prevent this with a "trust on first use" security model: the first time that the webapp is used, the code is cached. When loading again the webapp, check if an updated new version of the code is available, and prompt the user before upgrading.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.