Why is not there encrypted way of sharing/showing data such as Password to the user (hidden from web app Source code)?

I wonder if there will be (or is) a way to hide data such as passwords from the HTML/DOM structure? As, password fields can hide from external person other than the main user with something like "••••••••" but this does not preve… Continue reading Why is not there encrypted way of sharing/showing data such as Password to the user (hidden from web app Source code)?

GPU vs integrated graphics hardware, browser canvas fingerprinting, and multi- or dual-boot systems

My goal is to ensure that two operating systems installed side-by-side on the same device are unable to return the same canvas fingerprint, when a modern browser is allowed to run javascript without any anti-fingerprint restrictions in pla… Continue reading GPU vs integrated graphics hardware, browser canvas fingerprinting, and multi- or dual-boot systems

How to do auth without user interaction in an enterprise environment?

We are building a Chrome Extension that will be force-installed on each employee’s browser for the companies we work with.
We currently use OAuth but many employees are forgetting to sign up.
We are thinking of replacing OAuth with somethi… Continue reading How to do auth without user interaction in an enterprise environment?

With HTTPS-only mode in Firefox, may I still need HTTPS Eveywhere addon?

Firefox has a built-in toggle in settings to enforce HTTPS-Only mode. When enabled, the browser attempts to redirect to HTTPS every time and, if fails, blocks access to the website in the same way that it blocks access when, e.g., the SSL … Continue reading With HTTPS-only mode in Firefox, may I still need HTTPS Eveywhere addon?