Am I understanding correctly that you consider your adversary to be the National Security Agency, the world&#x27;s best funded, best equipped, best staffed SIGINT agency, and that you think they&#x27;re limited to passive observation?<p>Again: I just think this is a bad idea. I&#x27;m sure you&#x27;re great people, but cryptographic security is hard enough for native apps, without trying to deploy it in the jungle gym of some random browser runtime.<p>You should stop deploying this app from a web page. Altogether. And soon. Port it instead to be a Chrome extension that users install.<p>I&#x27;m sure you&#x27;re not hurting anyone right now. But you&#x27;ve built the kind of application that will, if it ever gets to be very successful, probably get people hurt. Better instead to work on something that will help people more as it gets more popular.