> But if we assume this site can be trusted not to send secrets online (which is easy to verify) This would require every sender and recipient to read and unde

> But if we assume this site can be trusted not to send secrets online (which is easy to verify) This would require every sender and recipient to read and understand the JavaScript on every page load, because there’s no guarantee that the server is sending every request the same content. It is in fact not easy, especially for non technical users. If we’re just assuming the site is trustworthy, the public key crypto isn’t necessary. If the site isn’t trustworthy, the public key crypto isn’t secure, because the site is in a position to compromise the private keys.