You may want to read this thread, as there was a similar discussion talking about end-to-end encryption from the browser.