DEV Community

Discussion on: I learned enough Web Crypto to be dangerous

Collapse
 
jamesernator profile image
James Browning • Edited

For just getting data to the server there is no reason whatsoever to use Web Crypto as the same algorithms are used to transfer data.

The typical reason to use Web Crypto is this flow:

  1. Client (Encrypt)
  2. Server (Can't read)
  3. Client (Decrypt)

Some of the more obvious examples of companies that would use this are ones like Dropbox and 1Password, but potentially anywhere sensitive data is kept might be the case for client->client crypto.

For example if a law firm uses an online document editor, it would be a huge risk both to the law firm and to the company hosting their documents if they stored unencrypted blobs on the server.