I realized a while back that the Tuta Maill appimage is an Electron wrapper. So in general, are electron wrappers more secure than web apps?
Difficult to say, probably varies on a case-by-case basis. One advantage electron wrappers have over web apps is that they bundle the application code, so it is loaded from your device rather than re-downloaded from the website every time you load the app. This may make it harder for an application developer to deliver a targeted malicious update without it being noticed. On the other hand, Tor Browser has a lot more anonymity protections than Electron wrappers.
1 Like
In this post @Patrick confirmed that a web app would break E2E encryption. Would an Electron wrap break E2E encryption too?
Depends on how the wrapper is written. A web app can always break E2E because an app developer can deliver a targeted malicious payload to any user they choose to. The browser loads the app from the service’s server regularly, so it acts as a sort of unavoidable backdoor. An Electron app can only do so if it is intentionally designed with a backdoor or a mechanism that can be abused as a backdoor.
1 Like