New answers tagged

3

The user can modify and delete anything stored in their browser. Any malware installed in the user's system with the user's privilege can also do so. The system administrator can also modify and delete anything stored in any user's browser. Any malware with the administrator's privilege can do the same. Another non privileged user in the same system ...


0

Given that you say this is not a real application, I'll only comment on a couple of points here. The first is an implementation detail that you might have already considered, the second is more of a theoretical "is this worth while?" question. 1. Password changes. It is generally considered good practice to require users to change their password every so ...


1

Firstly, on HTTP there is no way to do this securely. And when you include a TLS connection (a.k.a. HTTPS), why decrypt at the browser? That sounds as possibly the worst place to do so. If confidentiality is really that needed use proper encryption technologies like PGP/GPG and have the user decrypt / encrypt that on his/her/it machine. All you do is ...



Top 50 recent answers are included