This decryption takes place client-side in a web browser and uses the mailbox password which is known only to the user.
This decryption takes place client-side in a web browser. This decryption uses the mailbox password. This mailbox password is known only to the user.