# In Defense of JavaScript Crypto

DevFeed: [In Defense of JavaScript Crypto](<https://devfeed.tech/articles/in-defense-of-javascript-crypto-36632.md>)

Original publisher: [Read original article](<https://rdist.root.org/2014/06/23/in-defense-of-javascript-crypto/>)

Author: Nate Lawson

Published: 2014-06-23T12:05:28Z

Content type: opinion

Language: en

Sources: [rdist](<https://devfeed.tech/sources/rdist.md>)

Topics: [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Security](<https://devfeed.tech/topics/security.md>), [Web](<https://devfeed.tech/topics/web.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [SSL](<https://devfeed.tech/topics/ssl.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [credit-card](<https://devfeed.tech/tags/credit-card.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [google](<https://devfeed.tech/tags/google.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [race-condition](<https://devfeed.tech/tags/race-condition.md>), [security](<https://devfeed.tech/tags/security.md>), [ssl](<https://devfeed.tech/tags/ssl.md>)

## AI overview

This opinion argues that JavaScript cryptography in web pages remains difficult to implement safely. It discusses JavaScript's language-related problems for cryptographic code, limitations in proposed workarounds, and risks in using browser-side encryption to avoid PCI audit scope or reduce backend encryption.

## Source excerpt

Thai Duong wrote a great post outlining why he likes JavaScript crypto, although it's not as strong a defense as you might guess from the title. While he makes some fair points of some limited applications of JavaScript, his post is actually a great argument against those pushing web page JS crypto. First, he starts off with ... Continue reading In Defense of JavaScript Crypto