These are very good points. I believe that adding any real crypto to the JS code to be a doomed path so I probably won&#x27;t go for that. My only argument right now is couldn&#x27;t one verify that the IP of the recipient is the same as the address of the expected receiving device (or router) and be somewhat sure it&#x27;s not MITM?