I don't see ZeroBin fulfilling any useful purpose for the following two reasons: 1) The encryption and decryption features do not provide data confidentiality

I don't see ZeroBin fulfilling any useful purpose for the following two reasons: 1) The encryption and decryption features do not provide data confidentiality to users because the encryption/decryption environment is not controlled by the end users. The host retains complete control over the algorithms used and the input and handling of keys and plaintext. Users would need to verify that the client-side environment is safe to use on every single page load. 2) The host will still be legally required to block access to encrypted messages once someone sends them a URL containing the key. Furthermore, the host will still be liable to produce log files identifying users. Extensive case law exists in multiple countries to support these two statements. Similar comments were made in the HN discussion of CrypTweet[1]. [1] https://news.ycombinator.com/item?id=3611453 https://news.ycombinator.com/item?id=3611453