1-Well, if he is going to store his stuffs in a
webserver, he can ask the admin if the server supports
SSL.

2-Most browsers support SSL, so this is not a problem

3-Well, if the algorithm used is the same (as does the
key), he can decrypt the file from everywhere he wants.
This is not the problem.

-DBC