It's very rare indeed that I disagree with tptacek. :) But browser-side encryption can be useful to protect against TLS/SSL non-specific MITM. For example, let'

It's very rare indeed that I disagree with tptacek. :) But browser-side encryption can be useful to protect against TLS/SSL non-specific MITM. For example, let's say that you're in possession of a compromised root cert and don't want to perform client-side detectable JS injection to remove/minimize the app's encryption functionality.