Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Not exactly, because the JavaScript code can change and be delivered at ANY time. No code signature verification is involved.

An offline password manager is updated a few times a year, and will go through OS repository distribution, with verification of the signature for changes. Or you can download the software from the source website and check the signature.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: