News for hackers. Stuff that matters.

A comment on OpenPGPjs has passed an independent security audit. Parent comment

Re:OpenPGPjs has passed an independent security audit by digianarchist on Thursday August 16, 2018 @11:13AM (#17775318)
Remember when Hushmail backdoored their client-side applet to capture unencrypted emails and passwords?
[ Parent | on HN ]
Re:OpenPGPjs has passed an independent security audit by peterwwillis on Thursday August 16, 2018 @12:48PM (#17776327)
It appears they were actually just hosting a web app and users were sending their decryption password to Hushmail. I don't see a reference to backdooring the Java client, though obviously since they delivered it, they could do that too. https://www.wired.com/2007/11/encrypted-e-mai/
[ Parent | on HN ]
Re:OpenPGPjs has passed an independent security audit by bigiain on Thursday August 16, 2018 @07:57PM (#17779383)
I remember when Lavabit didn't...
[ Parent | on HN ]