The chat needs JavaScript: your card’s key is in this browser, and only a script can sign with it and check each message.