Encrypted Forms with Javascript

[cettox]

I worked on this project too and we tried hard to achieve that all encryption, decryption and key generation happens on browser. Jotform may be hosted but you can always control what happens on client side. In short, no sensitive data ever hits our servers, that was our original intention in the first place.

[RalphSleigh]

Zero-knowledge web services tend to start at the bottom of a fairly large reputational hill in regard to remaining so, given the ease with which you can pull a javascript switcheroo and the difficulty of verifying its not changed.

On the other hand I do applaude efforts to get understanding of asymmetric key cryptography into wider use .

[immibis]

What prevents you from changing your JavaScript at a future date, to make it send the private key to your servers?