[admax88q]

> is how to trust the JavaScript arriving from the server that it does what it's supposed to do.

This is an orthogonal problem. Something like CBCrypt would solve a real problem we have right now, which is most service providers don't secure their password database correctly.

If a service provider gets hacked to the point that they their javascript is malicious, all your content on that service is probably already pwned.