Password protect a static HTML page, decrypted in-browser in JavaScript

#1

Post by olestr » Fri, Aug 30, 2024, 8:17 PM UTC

Password protect a static HTML page, decrypted in-browser in JavaScript
github.com

Re: Password protect a static HTML page, decrypted in-browser in JavaScript

#2

Post by Rygian » Sat, Aug 31, 2024, 6:43 AM UTC

> returns a static HTML page showing a password prompt that you can now safely upload anywhere

Anywhere that you trust, and where the page is hosted securely. For example, a malicious hosting service could alter the password prompt. Or the page as a whole could be put in a frame with a transparent overlay.

Re: Password protect a static HTML page, decrypted in-browser in JavaScript

#3

Post by dxxvi » Sat, Aug 31, 2024, 9:40 AM UTC

This is what I'm looking for: a way to put something in public (I'm using Vercel) that "only" me can access (anybody who can decrypt it doesn't need the content that I encrypt).

Re: Password protect a static HTML page, decrypted in-browser in JavaScript

#4

Post by stavros » Sat, Aug 31, 2024, 10:11 AM UTC

dxxvi wrote: post #3

This is what I'm looking for: a way to put something in public (I'm using Vercel) that "only" me can access (anybody who can decrypt it doesn't need the content that I encrypt).

Just encrypt it with Age?

Re: Password protect a static HTML page, decrypted in-browser in JavaScript

#5

Post by Alifatisk » Sat, Aug 31, 2024, 11:18 AM UTC

stavros wrote: post #4

dxxvi wrote: post #3

This is what I'm looking for: a way to put something in public (I'm using Vercel) that "only" me can access (anybody who can decrypt it doesn't need the content that I encrypt).

Just encrypt it with Age?

This https://age-encryption.org ?

Re: Password protect a static HTML page, decrypted in-browser in JavaScript

#6

Post by arcfour » Sat, Aug 31, 2024, 11:35 AM UTC

dxxvi wrote: post #3

This is what I'm looking for: a way to put something in public (I'm using Vercel) that "only" me can access (anybody who can decrypt it doesn't need the content that I encrypt).

So you're looking for an authentication and authorization system.

Re: Password protect a static HTML page, decrypted in-browser in JavaScript

#7

Post by stavros » Sat, Aug 31, 2024, 11:53 AM UTC

Alifatisk wrote: post #5

stavros wrote: post #4

Earlier quoted context omitted.

Just encrypt it with Age?

This https://age-encryption.org ?

Yep!

Re: Password protect a static HTML page, decrypted in-browser in JavaScript

#8

Post by rafram » Sat, Aug 31, 2024, 12:39 PM UTC

Rygian wrote: post #2

> returns a static HTML page showing a password prompt that you can now safely upload anywhere Anywhere that you trust, and where the page is hosted securely. For example, a malicious hosting service could alter the password prompt. Or the page as a whole could be put in a frame with a transparent overlay.

Clickjacking has been a solved problem for over a decade. Set X-Frame-Options: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-...

Re: Password protect a static HTML page, decrypted in-browser in JavaScript

#9

Post by Rygian » Sat, Aug 31, 2024, 1:05 PM UTC

rafram wrote: post #8

Rygian wrote: post #2

> returns a static HTML page showing a password prompt that you can now safely upload anywhere Anywhere that you trust, and where the page is hosted securely. For example, a malicious hosting service could alter the password prompt. Or the page as a whole could be put in a frame with a transparent overlay.

Clickjacking has been a solved problem for over a decade. Set X-Frame-Options: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-...

Hence the need for a hosting service that you trust. You can't force that header on an untrusted server.

Re: Password protect a static HTML page, decrypted in-browser in JavaScript

#10

Post by whycombagator » Sat, Aug 31, 2024, 2:37 PM UTC

Similar project that supports files: https://github.com/mprimi/portable-secret