Questions tagged [service-worker]
4 questions
2
votes
1 answer
Does it matter that my browser shows an out-of-date certificate when a website uses service workers?
A website I frequent (a Discourse forum) uses Let's Encrypt TLS certificates which are updated every two months with a valid period of three months. But the certificate information shown by Chrome says that the certificate is out-of-date and…
curiousdannii
- 350
- 3
- 12
2
votes
1 answer
What measures can be taken to make a site safe again after a hostile service worker is installed in users' browsers?
So my understanding of Service Workers is that once installed they grant you full control over requests to a domain. If an attacker managed to include their service worker in your site, then for anyone who visited that site the service worker could…
curiousdannii
- 350
- 3
- 12
1
vote
0 answers
Progressive web app, Access token storage
I'm currently working on an existing PWA (Progressive web app) build in VUEJS. Currently i'm using Auth0 for user authentication and it works fine. But it seems a bit overkill and client finds it very hard to manage his users in Auth0 (multiple…
Bart Mommens
- 11
- 1
1
vote
0 answers
Are web worker / service worker secure environments to store a password, credit card information, access tokens?
If there is a case where I wish to store sensitive data like a password, credit card information, or access tokens:
Are web workers / service workers a secure environment, where such data can not be compromised?
If so, what to do to really secure…
Senju
- 111
- 2