That's the problem with in-browser crypto, though: you could change the source code at-will. You could even serve different versions of the source code to diffe

That's the problem with in-browser crypto, though: you could change the source code at-will. You could even serve different versions of the source code to different people. You might even be compelled by your state to do so, even if you wished not to. Better to deliver the end-user a piece of code he can examine once and trust going forward.