23496 2013-10-14 19:46:16 +0000 Informative note about developer expectation re user access to decrypted data? 2014-09-26 15:01:57 +0000 1 1 1 Unclassified Web Cryptography Web Cryptography API Document unspecified PC Linux RESOLVED WONTFIX P2 normal --- 1 hhalpin sleevi watsonm oldest_to_newest 94685 0 hhalpin 2013-10-14 19:46:16 +0000 The developer may have some expectation that when he decrypts ciphertext on the end point it isn't visible to the end user, but that isn't the case. (Dan Boneh's comments). An informative note? Dan Boneh 111938 1 watsonm 2014-09-22 17:36:10 +0000 I think it should be clear to JS developers that any data visible to JS is visible from the developer console to the user. Suggest won't-fix.