Re:Lavabit’s founder responds to cryptographer’s criticism
by tedunangst on Friday November 08, 2013 @12:18PM
(#6697515)
Well, they could be secure, unless the FBI also has a previously recorded session which they can now decrypt with the SSL key to recover the password.
Fun fact: Lavabit turned over an archive of encrypted emails from Snowdens account when he was first contacted by the feds. Those emails are still perfectly secure, because Snowden is the only person who knows the password required to decrypt the mail files. The reason the feds demanded the SSL keys (a few weeks after he first turned over the emails) is because they could not decrypt the mail files and wanted to try and capture Snowdens password the next time he accessed his account.