[tptacek]

It's hosted web mail that does crypto in Javascript. How closely do you expect crypto engineers to look at it?

Don't use web mail for secure messaging.