Have you taken a look at Cyph (mentioned elsewhere in this thread)? Their app is also basically cryptocat, but they&#x27;ve taken the time to engineer an interesting solution [0] to the &quot;Trust on Every Use&quot; problem that secure web applications have.<p>Of course, you still have the problem of deploying a secure application within the attack surface minefield of a web browser, but that&#x27;s a separate issue.<p>[0]: <a href="https:&#x2F;&#x2F;docs.google.com&#x2F;document&#x2F;d&#x2F;1PGS50eZB9Ud7wVKmrc0HU_FDygZkyuFjmTRrukAz3sw&#x2F;edit" rel="nofollow">https:&#x2F;&#x2F;docs.google.com&#x2F;document&#x2F;d&#x2F;1PGS50eZB9Ud7wVKmrc0HU_FD...</a>