Time to Encrypt the Cloud
The problem with in-the-browser encryption is that it is fundamentally insecure until websites can be made immutable. You're executing remote, mutable code to handle your secret data. Which means at any point the website operator could replace it with something that exfiltrates the data the moment you access it.<p>Even if the operator is not malicious they could receive a court order or the connection loading the code could be MITMed even if you think you're secure[0].<p>[0] <a href="https://medium.com/@karthikb351/airtel-is-sniffing-and-censoring-cloudflares-traffic-in-india-and-they-don-t-even-know-it-90935f7f6d98#.jktc9i7r6" rel="nofollow">https://medium.com/@karthikb351/airtel-is-sniffing-and-censo...</a>