ietf
[Top] [All Lists]

Re: not really pgp signing in van

2013-09-10 13:37:27
On Sep 10, 2013, at 2:19 PM, Phillip Hallam-Baker <hallam(_at_)gmail(_dot_)com> 
wrote:
You go to a Web page that has the HTML or Javascript control for generating a 
keypair. But the keypair is generated on the end user's computer.

So I run Javascript provided by Comodo to generate the key pair.   This means 
that my security depends on my willingness and ability to read possibly 
obfuscated Javascript to make sure that it only uploads the public half of the 
key pair.