I think they only gloss over the security on the front side. Have you read the documentation? https://keybase.io/docs/server_security https://keybase.io/docs/s

I think they only gloss over the security on the front side. Have you read the documentation? https://keybase.io/docs/server_security https://keybase.io/docs/server_security https://keybase.io/docs/sigchain https://keybase.io/docs/sigchain They do specifically mention the problem of javascript crypto. They also mention the fact they want to be mirrored. That said, I don't actually know enough to make smart decisions in this space. But I'd be interested in your thoughts after reading the docs (if you haven't already).