Skip to content

Execution context warning - #36

Open
TeddyBear06 wants to merge 7 commits into
mprimi:mainfrom
TeddyBear06:warn_about_insecure_contexts
Open

Execution context warning#36
TeddyBear06 wants to merge 7 commits into
mprimi:mainfrom
TeddyBear06:warn_about_insecure_contexts

Conversation

@TeddyBear06

@TeddyBear06 TeddyBear06 commented Feb 8, 2023

Copy link
Copy Markdown
Contributor

Let summarize my proposal #36 in two parts as creator and secret does not meets the same requirements.

A - Concerning the creator:

Requires HTTPS at any time.

Message: Please host this tool on an HTTPS server (notice that some browsers are not happy with a self-signed certificate).

B - Concerning the secret:

Requires a "secure context" (given by the isSecureContext property).

Message: The current browser context is not considered "secure" and portable-secret won't work properly. Please open this secret from your local filesystem (file://) or from an HTTPS server.

Display a warning message if the current browser context is not considered as "secure".
Comment thread creator/index.html Outdated
Comment thread creator/secret-template.html Outdated
TeddyBear06 and others added 4 commits February 8, 2023 23:30
Co-authored-by: Michael Brown <me@michael-brown.net>
Co-authored-by: Michael Brown <me@michael-brown.net>
@TeddyBear06

Copy link
Copy Markdown
Contributor Author

@mluisbrown Thanks for the review.

The same context logic testing cannot be used on both creator and secret as creator need HTTPS at any time (due to fetch() method). I also removed the localhost notion because it's confusing and serving content over HTTPS needs to be recommended at any time.
@TeddyBear06 TeddyBear06 changed the title [DRAFT] Browser secure context warning Execution context warning Feb 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants