That's very nice, I'm sure people would be interested in your app ! > secure (one would hope!) transport: email. The best strategy is to assume it is not (bec

That's very nice, I'm sure people would be interested in your app ! > secure (one would hope!) transport: email. The best strategy is to assume it is not (because it is not) and implement security at the end, like you did, because you have a specific usage that may not be generalized. End-to-end principle.