[107293] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Hushmail in U.S. v. Tyler Stumbo

daemon@ATHENA.MIT.EDU (John Levine)
Mon Nov 5 13:42:26 2007

Date: 2 Nov 2007 18:51:53 -0000
From: John Levine <johnl@iecc.com>
To: cryptography@metzdowd.com
In-Reply-To: <472B5D12.1070402@systemics.com>
Cc: iang@systemics.com

>In practice, the larger danger with email is that the high-profile
>threats to email security are on the client side.

Right.  I haven't used the end to end Java stuff, but I believe that
it works.  Unfortunately, when you go to sign up, what you get by
default is a version that is little more than plain old web mail, and
their signup process does not say "if you use the web mail we can read
all your mail and will provide it in plain text if suboenaed."

That's what I take issue with, promoting web mail as though it were
secure end to end PGP.

R's,
John

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post