When people ask me directly, I tell them to avoid Cryptocat, in a spirit similar to the one I used in the 90s when telling people to avoid Sendmail.