Is it still the case that the 1Password Master Password is never transacted over the web, even on 1Password.com? The encrypt/decrypt is done in the browser?
It was my understanding that the "secret key" never goes over the network. The secret key is generated locally, never sent over the network, and vaults are encrypted/decrypted locally.
