On: The security model of dark web marketplaces

[upofadown]

According to the article, the actual transactions are secured end to end entirely offline via PGP. The authorization involves a PGP identity as well.

Where would the user get the trusted javascript to do all this in the first place?