What makes Deadrop.us feasible?

Deadrop.us servers never have the opportunity to view your plain text message or your password because your message and password are never sent over the network to the servers.  Your message is encrypted via JavaScript within your web browser using your password as the encryption key.  Only the encrypted text and the Drop name are actually seen by the server.