I don&#x27;t think it&#x27;s a good idea to provide secure messaging services that boot from a web page, under any circumstances.<p>This stuff has to work. The adversary for secure messaging is world governments. If all you&#x27;re worried about is criminals, Gchat will do a fine job of protecting you. For a vivid example of what I&#x27;m talking about, see the Telegram&#x2F;Iran fiasco.<p>It&#x27;s hard enough building secure messaging in a native application; there are lots of details that are not easy to get right (as Cure53 demonstrated to your team).<p>Bluntly: I feel that it&#x27;s irresponsible to add to that portfolio of difficulties the added attack surface of content-controlled Javascript.<p>The reason people build services like this is that users will prefer them to (more secure) native app alternatives. It&#x27;s easy to see why. The common response to this observation is: &quot;but users won&#x27;t install an app&quot;. They won&#x27;t install an app because people keep luring the away with insecure web-page based secure messengers.