Which technology should I use for client-side web encryption?
shrughes: How is what you're designing any more secure than a typical website that communicates over HTTPS?  The user can't prevent you from sending a broken Java applet or a webpage with broken encryption code, so the user still has to trust you.  Look at what happened with Hushmail.