How is this secure?

Open EGreg opened this issue 6 years ago • 0 comments

MetaMask Mascara installs a serviceworker on some domain. Can't that domain simply change the service worker, and/or get the private keys? Are they non-extractable, is that why it works?

Aug 12 '19 20:08 EGreg