[fluidcruft]

> "which exists in the SpiderOak server's memory for the duration of your browsing session"

It would be entirely possible for SpiderOak to be compelled to store this key for the government. Once you hand over your private keys to anyone, you've lost control.

[rarrrrrr]

We recommend customers access data via the desktop client, which doesn't ever send passwords or keys to the server.