Question: Question 3. The web-server srv.Vict.im serves sensitive scripts. Due to efficiency or resiliency, this server must be hosted in a cloud service, however, we
Question 3. The web-server srv.Vict.im serves sensitive scripts. Due to efficiency or resiliency, this server must be hosted in a cloud service, however, we wish to minimize trust in the cloud service, and protect users against abuse by the operators of the cloud service. Realistically, the operators are able to read any data stored in the server and eavesdrop on all of its communication. Can you present solutions to prevent the operators from serving corrupt scripts to clients, by embedding appropriate defenses in the web-pages requesting the objects? For simplicity, you may assume that the web-pages only use scripts from srv.vict.im, and that you know in advance the exact scripts used. Present two solutions if you can (but better present only one than present an incorrect solution).
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
