[breatheoften]

That seems like a good idea -- a simple scheme where the browser validates every http response from a particular domain against a key specified in that domain's SSL cert (if the appropriate field is present in the https cert) -- seems like it would work well?

[anewhnaccount]

This is what MEGA does. See: https://github.com/meganz/webclient/blob/master/secureboot.j...