Since Google is actually working on this, I would read their PNaCL paper before calling the discussion "purely academic": http://nativeclient.googlecode.com/sv

Since Google is actually working on this, I would read their PNaCL paper before calling the discussion "purely academic": http://nativeclient.googlecode.com/svn/data/site/pnacl.pdf http://nativeclient.googlecode.com/svn/data/site/pnacl.pdf Summary: Send LLVM bytecode to the browser, and enforce sandboxing by inspecting the compiled code.