[seanmcgregor]

re crypto-experts: You are right on this, but we are going to stay away from implementing our own crypto libraries. Instead we will develop APIs for well supported libraries like PGP and package them for browser extensions. That is the proper way to do things.

re law requests: All code is and will be open source and executed on the client. Some of our sharing models could fail to man-in-the-middle attacks (they have other benefits though), but the most secure methods will be as strong as client side PGP.