I agree that any discussion of using JavaScript-crypto instead of SSL is nuts and likely a strawman complaint. But just because it's "the best we can do," that

I agree that any discussion of using JavaScript-crypto instead of SSL is nuts and likely a strawman complaint. But just because it's "the best we can do," that doesn't mean it's a good idea. EDIT 1 minute before I made this comment 'tptacek said the fallacy better elsewhere on this page "we really need browser crypto to work, therefore it works"."