Put what I said in quotes and treat it as the 1st (and the last) impression of your webapp. You may not like the snarky tone, but that's in the essence what an

Put what I said in quotes and treat it as the 1st (and the last) impression of your webapp. You may not like the snarky tone, but that's in the essence what anyone remotely interested in a secure online communication will think looking at your page. This is a constructive criticism and, believe me, it is a toned-down version of it. If you are to make claims that something you developed is "secure", the onus is on you to make it clear that it in fact is. If you don't, you come across as an ignorant amateur that makes unsubstantiated claims and who bears no understanding of the responsibility that comes with making such claims. If you are to develop for the security domain, you need to prepare for a lot more snark and outright dismissal that you got here. Ask me how I know.