> These requirements are fundamentally incompatible with webapps - where a no-questions-asked software update is only a press of F5 away, by design. If by "web

> These requirements are fundamentally incompatible with webapps - where a no-questions-asked software update is only a press of F5 away, by design. If by "webapps" you mean "applications that run inside a web browser" then I disagree, since it is possible to pin a specific (presumably third-party audited) version of a webapp by using a static local bookmarklet or saved file. See my other comment [1]. You're right, though, that this is not the typical user experience for a web app, and you might reasonably believe that all webapps should be visibly associated with a domain on the internet. Personally I think it is acceptable if a high security webapp requires a slightly less convenient UX compared to normal webapps. Nevertheless, it should still be quicker and safer to "install" a bookmarklet than install a native application like the Tor Browser. [1] https://news.ycombinator.com/item?id=22862376 https://news.ycombinator.com/item?id=22862376