[bmm6o]

He's presumably referring to slides 17-20. It essentially boils down to "JS crypto in the browser is better than nothing".

[rosser]

But it's not — at least not necessarily. That's the problem. It creates a potentially incredibly dangerous false sense of security, and nothing in the deck refutes that, or even argues against it.