content: I knew that would come up.  Yes I know Javascript Cryptography is considered harmful.  But I still think this is a worthwhile approach.  The main browsers we want to target will support the Web Crypto API.  More paranoid users can use more secure clients.  But the lurkers are critical to the success of an aggregator and a web client is essential for this demographic.  If we build out a web client for lurkers more involved users can run a local copy and avoid most of the perils of Browser JS crypto.  Or completely separate clients that don't use JS at all.    My thinking is that people only contribute a lot of stuff when they think a lot of people might actually look at it.  So we have to nail the lurker experience.