tank on Nostr: Unfortunately none of the mitigation strategies you listed address the core issue. ...
Published at
2023-06-25 12:09:20Event JSON
{
"id": "cc3008fdb032640066247655130abefc8b49c9994b10323fbb51e40e3f2c01a2",
"pubkey": "311b497635856767ff5c1cefa2b8c5c875ce184ae4876da9279e829ba01dd129",
"created_at": 1687687760,
"kind": 1,
"tags": [
[
"e",
"7eb23eff8884a0addc6bea113746a82f61f7ac3338b056dd6a57ad1509fed273",
""
],
[
"e",
"970cd2b4559db177b274744a7167fb94925a072a0d69c1325f7cbd8b84a9d745"
],
[
"p",
"c6f7077f1699d50cf92a9652bfebffac05fc6842b9ee391089d959b8ad5d48fd"
],
[
"p",
"fa984bd7dbb282f07e16e7ae87b26a2a7b9b90b7246a44771f0cf5ae58018f52"
],
[
"p",
"c6f7077f1699d50cf92a9652bfebffac05fc6842b9ee391089d959b8ad5d48fd"
]
],
"content": "Unfortunately none of the mitigation strategies you listed address the core issue. This post does a good job of detailing why it‘s trivial to extract key material from a web app https://tonyarcieri.com/whats-wrong-with-webcrypto",
"sig": "abd6f443b44d952336c91016897b465031b3db247e9b766be148570bcccb9e7ee091401f12ec2d66d66da6f41526904674c8d72a3008f1b5a9f58a2792076e23"
}
