[jerf]

If you're not doing the encryption, it isn't being done to solve your problems, it's being done to solve someone else's. That's not a bad thing and it may still help you on the net, but if you want to protect your own interests fully you need to be doing the encryption yourself.

"Doing the encryption yourself" doesn't mean you have to write the code personally... HTTPS in the browser (assuming correct implementation) counts as "doing it yourself" for this purpose. You just can't count on the infrastructure alone to do it for you.