Signed Pages Reviews

Sucuri Reviews

Signed Pages mentions (12)

• E2EE on the web: is the web that bad?

  There is "Signed Pages" by the debeloper of EteSync. It is a browser extension, that checks webapps based on signatures in the html file. The addon then warns the user if the signature is not correct or - if I remember correctly - the source changed. This allows you to be sure what webapp code was delivered. But it seems like it did not really get used outside of his own projects. - Source: Hacker News / 4 months ago

• Cloudflare and CDNs - call for community opinions

  EteSync has implemented something called Signed Pages, this might be worth looking closer at. This uses PGP keys which is preloaded into the browser; but I suspect that will be a barrier too high for most non-tech users. Source: about 1 year ago

• Truly safe?

  There are also projects like signed web pages which can also help increasing the trust level to some degree. But that requires that you can download the source code and regenerate the verification hash locally - or have other trusted methods to verify the hash value hasn't been modified as well. The current concept is reasonably sane, but it requires too much from users currently to make it widely used. Source: almost 2 years ago

• Security experts declare all Proton apps secure after security audit

  > The server can at any time start serving malicious payloads True, and I call this threat model "Beware Each and Every Fetch" (BEEF) in contrast to the more common TOFU model (although if you trust a desktop app to auto-update itself then these two models might not be all that different). In any case, I think you're being a little quick to dismiss the idea of server-hosted applications. It's true that browsers... - Source: Hacker News / about 2 years ago

• ProtonMail Is Inherently Insecure, Your Emails Are Likely Compromised

  Something like a browser extension for this does already exist, fortunately: https://github.com/tasn/webext-signed-pages. - Source: Hacker News / over 2 years ago

Sucuri mentions (17)

• how to fix my sites have been blockd because of mal ware

  You should always backup your website(s). If you are not running backups, you most likely aren't maintaining efficient security measures on your website as well. The only suggestion I have is contacting Sucuri and pay to clean your website up and stick with their WAF plan. Source: about 1 year ago

• Malware - how to find the offending files

  I know you found what you're looking for but.. I would recommend doing a third party malware scan with someone like sucuri.net. If there is a backdoor somewhere then it'll just get hacked again and there's a potential that credit card processors can take action if they think the company is a liability. Source: over 1 year ago

• Is There Any Way to Force Starlink to Refresh a Webpage Instead of Using Cached Data?

  The .19 address comes back as sucuri.net - if that's your web host it makes sense. Source: over 1 year ago

• Is Your WordPress Website Secured? Few Ways to Make It Bulletproof

  Sucuri - A company known for its WordPress security plugin and website firewall. They are the best in terms of website security. Unlike the others, Sucuri also offers a malware removal service. Source: over 1 year ago

• Google Analytics of my WordPress website shows strange links

  Yeah, I used Wordfence to clean up my website and it help remove most of the infected files but it's unable to detect this file. This file keeps showing up in https://sucuri.net/ website malware checkup. Source: over 1 year ago