That's a good point... Perhaps a better solution is for them to be able to sign the public keys from the other sites to connect their profiles that way. Thank

That's a good point... Perhaps a better solution is for them to be able to sign the public keys from the other sites to connect their profiles that way. Thank you for your feedback. I can see now how a malicious system operator could steal the user's private key by modifying the JS.