bit.ly/ndt4ss What does it take to get some attention on HN? Do you have to be part of some secret cabal? I solved all the problems he talks about (and I worked with a crypto guy):

- Statically encrypt and publish content on HTTP server - Transmit these via HTTP to an iframe component at client browser - HTTP-iframe locally sends message to HTTPS-iframe via window.postMessage() - HTTPS-iframe decrypts content (with pre-shared key) and renders it on page

I implemented a library to do this (3 years ago!). Anyone care to tell me just ONE vulnerability with this? Thanks! bit.ly/ndt4ss