Other: A solution to get around the trust issue of host proof hosting. Most users will not have the ability to analyze your code, for security holes and those that do won't have the time and even if they did, it wouldn't be worth it, as the time taken would outweigh the gains of the application.

THESE WILL BE A HUGE UNDERTAKING, HOWEVER your clients need to either:

a) be certified
This is most likely unreasonable as it would destroy the update process.

OR

b) use a common open source library for ALL communications that your extension makes.
This library would need to be useful for the majority of host proof hosting apps so that there would be a large community which can develop and monitor the security of the project. This would allow you to make as many updates to your own application without users having to worry that the new update might purposefully or accidentally introduce a security flaw in the encryption or transmission of their sensitive data. There would of course have to be a way to ensure that your extension is limited to only transmitting via this library.


I will be amazed if you attempted either, but if you want to gain trust of your users, this is what you are going to have to do sooner or later and the first HPH developer that realizes this and has a good apps, will end up being the winner. Currently as it stand, you have a fantastic app, but until we can trust you, nobody who knows the slightest thing about security will recommend you to their non IT friends or their mum and dad and will in fact discourage such people from using your app despite how useful it may be.