Unless they are falling asleep on the job I strongly suspect that Ben Laurie and Tom Ptacek will let rage mercilessly about the lack of wisdom* of doing crypto in the browser, but I do like CryptoCat – and not just for the cute video:
Cryptocat Adventure! from Nadim Kobeissi on Vimeo.
The concept is squarely in line with my desire to see autonomous secure communication between individuals, and if it could be done point to point (or even peer to peer) I would be even happier.
So long as the weaknesses are understood by the user, I love this.
—
* let’s see, issues include:
- browser bugs
- sniffing stuff (keys, plaintext) out of the DOM
- trust issues with respect to where you retrieve the pages
- how ‘hard’ the crypto can be in such an environment
- forged/spoofed identities (compare: permanent OTR keys)
I suspect they can add many, many more.
Leave a Reply