The Firefox Send implementation is kind of neat, uses the Web Crypto API to generate a key, encrypt the file, then stores the key in the file’s url hash fragment, and since browsers don’t send hash fragments to the server, only the recipient gets the decryption key in the url the sender sends to themgithub.com #