> Do you trust Dropbox to not send compromised JavaScript every time? If so, why not trust them with your keys in the first place? I was thinking about the sub

> Do you trust Dropbox to not send compromised JavaScript every time? If so, why not trust them with your keys in the first place? I was thinking about the subpoena situation, when the Govt. demands Dropbox to hand over keys. I presume DropBox can definitely send compromised JS or even a malicious client. This is very reminiscent of the whole notion of trusting trust! http://en.wikipedia.org/wiki/Backdoor_(computing)#Reflections_on_Trusting_Trust http://en.wikipedia.org/wiki/Backdoor_(computing)#Reflection...