If a user doesn't trust Dropbox, why would they trust passwordprotectmyfile.com?... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

michaelt on March 5, 2014 | parent | context | favorite | on: Show HN: Password-Protect My File

If a user doesn't trust Dropbox, why would they trust passwordprotectmyfile.com?

I know it claims the file doesn't leave your computer, and that might be true right now, but in five minutes if I visit the page the code could have changed. And it would hardly be user-friendly to ask users to check the minified javascript before using it.

sobel on March 5, 2014 [–]

It's a little clunky, but I do have a process in place for checking that the website matches the code: https://github.com/louissobel/ppmf/blob/master/bin/check_pro...

hamburglar on March 6, 2014 | [–]

If you have to run a local program to verify the code on your web page, why don't you just put the code you are verifying in the local program?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact