[tyleroderkirk]

Agreed. Web browsers are infamous for being vulnerable to remote attack - I want to keep my sensitive data away from them as much as possible.

This concept of "host-proof hosting" seems to encourage that we discard well-proven methods in favor of implementing new crypto schemes in the hostile browser-space.

Are web end-users really better equipped to ensure application security than web host administrators? </rhetorical>