私钥的客户端存储

Question

I know that we're not supposed to "trust" the client because JavaScript is an interpreted language and it is trivial to inspect variables, even with code obfuscation and uglifying.

Still, I wanted to ask the following :

• is it possible to store a variable that is very hard to access? ie some kind of javascript trigger that is able to detect when the event loop has been stopped (and react accordingly?)
• ie I wanted to store a secret value in the client but I didn't want clients to actually go and look at what the value actually was.

thanks

Follow-up : even if the client can find the variable, is it possible to detect tampering of the variable? ie some polling between the client/server such that if the client event loop doesn't respond periodically every X seconds then the server considers the client compromised?

Answer 1

如果客户端拥有它，客户端可以找到它。