title: HTML5 Offline Single Page Application (SPA) - Security Concerns
body: <p>We want to build an offline capable HTML5 SPA with sensitive business data.
  Most likely with knockout.js!</p>
  
  <p>But we have really hard security concerns.</p>
  
  <p>What about encryption? Encryption may be possible. But the appropriate key has to be on the (offline) client side as well. And if you have both the algorithms plus keys on the client side you could also store it unencrypted in local storage.</p>
  
  <p>What about data manipulation? It´s easy to manipulate the DOM or JavaScript objects with tools like Firebug etc.</p>
  
  <p>I really love knockout but it doesn´t feel right for real world business applications.</p>
  
  <p>Any suggestions?</p>