3 ms·

So if you were to use a non-web client, and that client stored the keys locally, would that prevent the attack?