Unfortunately, blockchain.info and similar implementations are vulnerable to the Lavabit attack; you never know if the JS code your browser just downloaded won't send an unencrypted copy of the private key to their servers.