Re:Protect Your Content Anywhere on the Web: Privly
by seanmcgregor on Tuesday March 20, 2012 @12:43AM
(#3727866)
re crypto-experts: You are right on this, but we are going to stay away from implementing our own crypto libraries. Instead we will develop APIs for well supported libraries like PGP and package them for browser extensions. That is the proper way to do things.
re law requests: All code is and will be open source and executed on the client. Some of our sharing models could fail to man-in-the-middle attacks (they have other benefits though), but the most secure methods will be as strong as client side PGP.
Re:Protect Your Content Anywhere on the Web: Privly
by seanmcgregor on Saturday March 24, 2012 @06:20PM
(#3750942)
More details on the encryption element: http://www.kickstarter.com/projects/229630898/protect-your-c...
They don't claim to be crypto experts, and the website is a bit thin on details.
I'm also worried about how they'll handle validly formed law-enforcement requests. See, for example, Hushmail creating a compromised version of their Java app and surreptitiously serving that to a criminal gang so that the email could be decrypted.
But it's an interesting idea, and I'm keen to see how they go.