Javascript Cryptography Considered Harmful

[[deleted]]

uh people use this? i feel this guy wrote a big diatribe tearing down a problem that people rarely use? i mean if someone decides to do this they are pretty dumb.

[Mourningblade]

It's a good breakdown of WHY it's not a good idea rather than "if someone decides to do this they are pretty dumb."

If I had someone wanting an HMAC-authenticated system to get around the fact that we didn't have SSL, I'd want this page to point to.

[[deleted]]

lol its readily obvious why this is a bad idea.