I've been hacking up a facebook clone at work. I've discovered that it's easier than ever to have end to end encryption. For example, there are now good worki

I've been hacking up a facebook clone at work. I've discovered that it's easier than ever to have end to end encryption. For example, there are now good working RSA and symmetric javascript crypto libraries that work in the browser: for RSA: https://github.com/travist/jsencrypt for AES: https://code.google.com/p/crypto-js/ This includes generating your own private key for a totally in-browser "sign up" process (browser can save your private key in a file, you then point to it to "log in"). Add to this: a distributed message passing system: something like torrents with channels shared by multiple users so that you can't easily see who is sending to who with enough traffic. Also for identity verification: use the bitcoin block chain as a CA. Anyway, think of a single-page web-app, where the page is stored along with your private identity file on a USB-key (this avoids the security hole of having to download it every time).