Hacker News Reader

Still would only be as secure as https if the client is downloading your JS crypto lib every visit.

Would it be safe to keep the crypto lib on the client somehow? Browser addon? local storage? How would we do that?