I know of a website that decrypts all its content clientside and uses this (i think) as a mechanism for a user to download his own attachments. The Idea is tha

I know of a website that decrypts all its content clientside and uses this (i think) as a mechanism for a user to download his own attachments. The Idea is that the whole website could be a static file somewhere and the webserver is only a key value store that has no idea what it is saving. Doesn't work that way currently because file:/// doesn't allow ajax calls to somewhere else but that's a solveable problem. Generally, every download that gets generated clientside by the JS is hit by this