Keynote Cryptography in Web Security Stupid, Broken, and maybe Working