Linked by Thom Holwerda on Mon 28th Jan 2013 22:38 UTC
Thread beginning with comment 550699
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[5]: Comment by Laurence
by Lennie on Tue 29th Jan 2013 23:41
in reply to "RE[4]: Comment by Laurence"
I'm sorry, but the video wasn't uploaded correctly or something. I was never able to get to the part where he talks about why it is insecure.
Anyway, HTML5 with CSP really isn't that bad:
http://www.w3.org/TR/CSP/
You can even do encryption (draft):
http://www.w3.org/TR/WebCryptoAPI/
RE[6]: Comment by Laurence
by Laurence on Wed 30th Jan 2013 09:25
in reply to "RE[5]: Comment by Laurence"
Sorry, you're right about that video. Try here:
http://www.youtube.com/watch?v=7PmCQ8qJCV4
Basically it's like working with cookies; you wouldn't store sensitive information in cookies and thus you shouldn't store them in local storage. They're both susceptible to the same kinds of attacks.





Member since:
2007-03-26
HTML5 local storage is insecure[1] and ZIP files aren't as easily searched as a client with built in search tools against indexed content.
Of course, there will always be ways you can work around the limitations of the web; Javascript runtimes have come a long way and many web apps these days are pretty sophisticated. Plus I'm not ignorant to some of the unique benefits they offer (eg easy to roll out bug fixes). But native apps have their own benefits as well; they're generally more responsive, can be better secured for offline content and they integrate with the host OS better (this is even the case on many platforms that are internet orientated devices; eg smartphone and tablet OSs).
So while I do appreciate that you're trying to demonstrate that you can replicate some functionality in HTML5, it's really not at a stage where it's ready to replace native binaries entirely.
[1] http://www.youtube.com/watch?v=RbOaRle4Pw8
Edited 2013-01-29 10:01 UTC