I agree with you that JavaScript crypto is dubious in many applications, but as a note, I believe that HTML/JavaScript makes a good cross platform application p

I agree with you that JavaScript crypto is dubious in many applications, but as a note, I believe that HTML/JavaScript makes a good cross platform application platform that, due to the lack of difficult to reproduce compile steps, has the potential to provide increased security over traditional applications. In particular, it should be possible for something like a Chrome application to not update until it has received signatures of the source code itself from multiple trusted sources who have supposedly reviewed the code, which, while not perfect of course, is better than the usual model for native applications. That's one of a few reasons that the Web Crypto standard should be encouraged, IMO.