logoalt Hacker News

loloquwowndueotoday at 1:43 AM1 replyview on HN

The NIH mentality in the ecosystem would result in a JavaScript pgp library which itself would be an npm package and subject to supply chain attacks. lol.


Replies

panzitoday at 2:00 AM

A good part of it is already implemented in web crypto, which is supported by browsers and node. There is a chance that npm could implement something there without extra dependencies. Maybe I'm too optimistic?