only because nobody thought to make a wasm based signer module for web apps. javascript lets anything read anything. but not wasm, unless you export it. and it can't read the memory of the module eith...
> only because
I strongly believe that browsers we know today, with their whatever isolation techniques, shouldn't be trusted to read private keys in any way.
The browsers are too huge and too rapidly changing for anyone to adequately audit them.
Also, there are proprietary browsers that normies like; who knows how these can be exploited, especially in combination with proprietary extensions. I'm sure we'll keep hearing a lot of creepy news on these in particular.
I strongly believe that browsers we know today, with their whatever isolation techniques, shouldn't be trusted to read private keys in any way.
The browsers are too huge and too rapidly changing for anyone to adequately audit them.
Also, there are proprietary browsers that normies like; who knows how these can be exploited, especially in combination with proprietary extensions. I'm sure we'll keep hearing a lot of creepy news on these in particular.
1