I run an online gradebook. To keep student data private, I transfer all data over https.
Now, I'd like to use localStorage to avoid redundant calculations and server requests. However, according to the HTML5 spec, local storage is unencrypted.
Is there an industry standard for handling user expectations here? I could imagine prompting users with something like "Do you want to use local storage? It will make everything faster, but if your computer is compromised student data could be stolen. If this is a public computer, choose 'No.'"
What trends are there for the UX side of this?