[ritratt]

I am no expert.

Client side encryption is unexplored. Secure crypto is possible only through extensive peer review, which is missing in the case of client side encryption using JS.

I think SSL/TLS is sufficient if implemented correctly. The only advantage that client side encryption using js offers is that the contents are not known to the server. Whereas in the case on SSL/TLS, the server basically has access to all your encrypted data since they hold the keys. But I digress. Client side encryption needs more R&D.