Comment

Remember Lavabit, the "Secure Email" Service That Shut Down? It Was Totally Insecure.

102
unproven innocence11/06/2013 2:04:30 pm PST

re: #87 klys

I sort of feel like the claim that “our admins cannot read your e-mail” (see screenshot) is not compatible with the reality of “our server transmits your e-mail to you in plaintext.”

Am I misunderstanding something here?

If the sender of an email has not encrypted the body of that email, the entire thing would arrive at Lavabit unencrypted. In any case, the so-called metadata would not be encrypted —the envelope, if you care to call it that. Notwithstanding NSLs and such, Lavabit’s service involved a promise of keeping clients’ emails encrypted while they were stored on Lavabit’s own server(s).

Anyone inferring (or implying) a promise of end-to-end security for the overall email communications is in error.