An effort to document the pitfalls of web crypto and a roadmap for making browsers more secure & private