How can a browser app protect private keys both at runtime and at rest?
I'm building a personal end-to-end encrypted chat application and I'm stuck between two imperfect browser storage options. Data in localStorage or IndexedDB may be readable from the browser…