http://www.wired.com/2012/08/wired_opinion_patrick_ball/all/ It's about cryptocat (secure chat) but the same principles apply. Note that cryptocat has switched to a browser addon-based design afterwards.