This was on HN previously, but not at this domain, they said the key generation and link formation was performed client-side, at no point does the key get sent

This was on HN previously, but not at this domain, they said the key generation and link formation was performed client-side, at no point does the key get sent to the server. You send the encrypted message to the server and the javascript serves the url that combines the client side key and the servers uid for the paste. See: http://sebsauvage.net/paste/ http://sebsauvage.net/paste/