Interesting to relitigate this every few years. We can sum it up every time with, "private/secret keys accessible to browser means trusting the users browser."

Interesting to relitigate this every few years. We can sum it up every time with, "private/secret keys accessible to browser means trusting the users browser." the details are superfluous. The relevant xkcd on this is this one: https://xkcd.com/2217/ https://xkcd.com/2217/ Where "check my math" means the same thing. The browser isn't trustworthy.