~/talk

Secure Crypto for Browser Based Apps

Talkat JSConf EU 2014 · 2014-09-13..09-14· [security, web-platform]
links:none on file
slides:none on file

Mailpile runs mission‑critical crypto outside the browser by calling GnuPG from a local Python backend while keeping a rich HTML5 frontend, claiming to avoid JS crypto pitfalls like unreviewed primitives and weak RNG and noting Window.Crypto has spotty browser support. The app ships native installers that spin up a localhost service, reuses audited native crypto, hooks into GPG tools, and positions web UI work for developers while asserting Bitcoin wallets grew from ~500k to over 2M as motivation.

AI-written summary · about

  1. 0:00Start
  2. 0:58Rise of Crypto Currencies
  3. 1:30Strong Crypto
  4. 3:00Concurrent PGP in JavaScript
  5. 3:55Why not an HTMLS app?
  6. 6:00Hybrid App
  7. 6:38Larger Talent Pool
  8. 8:47Front-End Devs
  9. 9:10Whole Ecosystem
  10. 14:53Let's Re-Decentralize
  11. 15:07Re-Expose Localhost
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.