[larrybolt]

Offer end-to-end encryption could be solved using a javascript library which encrypts/decrypts the secret in the browser, and passing the key behind a #, kind of the way mega.co.nz does it. Than you can always verify that what you typed actually never get's submitted to the host unencrypted.

[mbenjaminsmith]

Before I get to far into a topic I'm not an expert in, I'll refer you to these:

http://matasano.com/articles/javascript-cryptography/

http://tonyarcieri.com/whats-wrong-with-webcrypto

I'd say the main issue with that is sending an encryption package over an insecure channel. While you could verify the package independently (check a hash against a publicly known one) you're already into advanced user territory and the "encryption for everyone" point of this is gone.