Comment Comment by kofalt > protection against the attack model of the passive eavesdropperMy argument would be that trying to protect against passive attackers with JS adds nothing beyond what SSL already offers.Which is already required as a matter of course, and already compromises the payload if SSL is broken (again). parent kofalt 12 years ago
My argument would be that trying to protect against passive attackers with JS adds nothing beyond what SSL already offers.
Which is already required as a matter of course, and already compromises the payload if SSL is broken (again).