Comment by dragontamer

CBC is far easier to implement than GCM mode.

I bet that most programmers cannot implement a Galois Field in Javascript. Meanwhile, CBC is just "encrypt then xor".