Sirna

sirna

Encrypted so that destroying the key destroys every copy.

This web client has weaker integrity than the CLI or the Android app.

Why the web client is weaker

The server sends your browser the code that handles your key. A server that has been compromised — or an operator who has been compelled — could send a version that quietly keeps a copy, and there is no way for you to tell from inside the browser.

The command-line tool and the Android app do not have this problem: you install them once and can check what you installed.

Everything else holds. The key is generated here, never sent to the server, and never put in the address bar.