> If browser based are there anything better than https? Imap + pgp? I guess Electron might be a reasonable application to quickly move your crypto code from

> If browser based are there anything better than https? Imap + pgp? I guess Electron might be a reasonable application to quickly move your crypto code from the website to a local client so that a compromised server can't simply backdoor it. But then you want it to auto-update for security issues and you're back to square one. And if someone inspects the source code of each update (they won't), they'll just be slower updating and either run the old (vulnerable) code for longer, have forced and unscheduled downtime (while looking at the diff), or run the new code before it has been vetted.