Browser changes can make things more convenient, but we have all the tools to create secure though somewhat cumbersome host-proof applications today. Yes, the J

Browser changes can make things more convenient, but we have all the tools to create secure though somewhat cumbersome host-proof applications today. Yes, the Javascript environment sucks, but it's what we have - dismissing the possibility that we can do secure crypto with strictly controlled input, where all components are verified, is not reasonable and not backed up by evidence.