On Sep 10, 2013, at 2:19 PM, Phillip Hallam-Baker <hallam@xxxxxxxxx> wrote: > You go to a Web page that has the HTML or Javascript control for generating a keypair. But the keypair is generated on the end user's computer. So I run Javascript provided by Comodo to generate the key pair. This means that my security depends on my willingness and ability to read possibly obfuscated Javascript to make sure that it only uploads the public half of the key pair.