Yes, I am making that claim. Especially since: 1. That notepad file can be encrypted on the laptop; and 2. "Web app" programmers so often get security really

Yes, I am making that claim. Especially since: 1. That notepad file can be encrypted on the laptop; and 2. "Web app" programmers so often get security really wrong. This entire thread is just one of a huge number of examples of that. Honestly, any hosted solution that relied on JS for encryption or authentication would encourage me to keep storing secrets in text files on my laptop. Here's a fun, easy way to understand why hosted solutions are rarely a good idea for storing private data: - Make a chart with four columns; - Column 1 is "Unencrypted local storage"; column 2 is "encrypted local storage"; column 3 is "remote storage with JavaScript encryption"; column 4 is "remote storage with SSL + server-side encryption"; - Under each column, write down a list of every method you can think of that that particular system could be broken. Take your time and be creative. - Cross out any methods that all of the columns have in common. - Compare the results.