It's admittedly terse (it was part of a presentation Ben Adida gave at the first Real World Cryptography workshop).
However, I'd suggest reading the deck again, and while you do asking yourself, does JS crypto provide any security beyond what SSL does? And, can JS crypto make sense as part of a defense in depth/layered security approach?
It's admittedly terse (it was part of a presentation Ben Adida gave at the first Real World Cryptography workshop).
However, I'd suggest reading the deck again, and while you do asking yourself, does JS crypto provide any security beyond what SSL does? And, can JS crypto make sense as part of a defense in depth/layered security approach?