search

MetaMask / mascara

(beta) Add MetaMask to your dapp even if the user doesn't have the extension installed
Other
173 stars 29 forks source link

How is this secure? #25

Open EGreg opened 5 years ago

EGreg commented 5 years ago

MetaMask Mascara installs a serviceworker on some domain. Can't that domain simply change the service worker, and/or get the private keys? Are they non-extractable, is that why it works?