You're right about that, I certainly over generalized the issue.  I should have just stuck with "javascript crypto shouldn't be used in place of TLS."<p>The host proof hosting stuff is pretty interesting.  Some people implement something similar when using dropbox, by encrypting the files before they are synced.  A disadvantage of this method (other than being cumbersome), is that you lose the bandwidth savings of Dropbox's deltas.