Breaking down the possibilities of breaking in. Maybe I am missing something obvious, but that second answer is pretty awful IMO. What prevents a malicious script from just copying the public key ...

Jesus Rodriguez asks:. My question has to do with JavaScript security. Imagine an auth system where you're using a JavaScript framework like Backbone or AngularJS, and you need secure endpoints.