That is known and outside the scope of the project. So, the idea would be to post a message that one or more people who know the predetermined password could read in a central location.

It's also only as secure as his javascript that you are downloading (from his server) to encrypt the message with.