How would you implement a secure web interface to distributed encrypted storage? The moment a user wants to view email in their browser, it needs to be decrypted by Google's server (or decrypted by Javscript served from Google's server, which is equivalent from a security perspective).

For users who are willing to give up the web interface, there are many open-source email clients that provide strong encryption (e.g. Thunderbird + GPG).