# Can the boundary nodes ever be decentralised and still guarantee a secure frontend?

**URL:** <https://forum.dfinity.org/t/can-the-boundary-nodes-ever-be-decentralised-and-still-guarantee-a-secure-frontend/11194>\
**Category:** Developers\
**Created:** [February 28, 2022, 9:37pm UTC](https://forum.dfinity.org/t/can-the-boundary-nodes-ever-be-decentralised-and-still-guarantee-a-secure-frontend/11194 "2022-02-28T21:37:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fulco](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/fulco/32/910_2.png) [@Fulco](https://forum.dfinity.org/u/Fulco)\
**Post date:** [February 28, 2022, 9:37pm UTC](https://forum.dfinity.org/t/can-the-boundary-nodes-ever-be-decentralised-and-still-guarantee-a-secure-frontend/11194/1 "2022-02-28T21:37:41Z")

</div>

As I understand it certified assets work by the boundary nodes installing a service worker that verifies the certification header on all http responses.

How would a rogue boundary node be prevented from not installing this service worker and then giving you a fake NNS frontend that transfers out all your ICP as soon as you have logged in with Internet Identity?

---

<div class="post-metadata">

**Author:** ![levi](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/levi/32/22608_2.png) [@levi](https://forum.dfinity.org/u/levi)\
**Post date:** [February 28, 2022, 9:53pm UTC](https://forum.dfinity.org/t/can-the-boundary-nodes-ever-be-decentralised-and-still-guarantee-a-secure-frontend/11194/2 "2022-02-28T21:53:10Z")

</div>

> [@General security question on the frontend certified assets through the boundary nodes and service worker](https://forum.dfinity.org/t/general-security-question-on-the-frontend-certified-assets-through-the-boundary-nodes-and-service-worker/10862):
>
> For the frontend assets that get certified through the boundary node and service worker, how can the boundary node be trusted to serve the service worker that will correctly validate the query certification? Even though the query calls come back with the certified data, how can the single boundary node be trusted to validate the certified data? This means that front end assets that get served to end users even with the certified-data are still only in the hands of one boundary node that is servi…