Never mind all the other obvious problems that could occur at any stage. The webmail server could change a single setting and record every keystroke. An intelli

Never mind all the other obvious problems that could occur at any stage. The webmail server could change a single setting and record every keystroke. An intelligence agency could push an updated version of the extension which records keystrokes or quietly caches plaintext. A browser update could detect the extension and start recording everything. Any time you try to make encryption simple and easy for a mass audience you still have to educate the user about risks. Most solutions are not bulletproof enough to keep out intelligence agencies.