<i>Am I understanding correctly that you consider your adversary to be the National Security Agency, the world&#x27;s best funded, best equipped, best staffed SIGINT agency, and that you think they&#x27;re limited to passive observation?</i><p>No, you aren&#x27;t; the example was to illustrate an entirely different point.<p><i>Again: I just think this is a bad idea. I&#x27;m sure you&#x27;re great people, but cryptographic security is hard enough for native apps, without trying to deploy it in the jungle gym of some random browser runtime.</i><p>Do you have a specific criticism, or is your argument more of a general point that solving multiple hard problems is more difficult to do correctly?<p>If that is what you&#x27;re getting at, it seems like it would be effectively addressed by frequent audits of the Cyph source code.