News for hackers. Stuff that matters.
Re:Lavabit abruptly shuts down by rorrr2 on Thursday August 08, 2013 @09:03PM (#6183057)
It all happens on the client side. Servers only store the encrypted emails and have no idea what the contents or the keys are.
Re:Lavabit abruptly shuts down by moutarde on Thursday August 08, 2013 @10:38PM (#6183387)
The same server(s) also control the JavaScript code run by the client/browser. They could serve special code (to any one the government wanted to spy on) that returned their password to the server.
Re:Lavabit abruptly shuts down by rorrr2 on Friday August 09, 2013 @09:04AM (#6185319)
That's exactly why LavaBit shut down, looks like they were forced to do that.
Re:Lavabit abruptly shuts down by adrianwaj on Thursday August 08, 2013 @09:12PM (#6183090)
right, but incoming and outgoing emails from lavabit servers won't necessarily be encrypted, unless the other party is using GPG or whatever - it's just the way they're stored.