3 ms·
I must admit I don't see the problem since this isn't "give us unencrypted mails from your encrypted service" but actually "give us unencrypt mails from your un
by Dah00n 5y ago
I must admit I don't see the problem since this isn't "give us unencrypted mails from your encrypted service" but actually "give us unencrypt mails from your unencrypted service". This is not any different than any other case of "hand over the data". The court specifically only ask for unencrypted mails. Of course one can argue for and against this access by law-enforcement but this is a clickbait headline that sounds as if they have to monitor and hand over encrypted mails unencrypted.
>The decision will only impact unencrypted incoming and outgoing emails, as Tutanota can’t decrypt data that has already been encrypted, Tutanota added. It also said this should serve as a warning that for customers interested in maintaining their privacy, encryption is paramount.
- jrochkind1 5y agoSo what makes it different than some "hand over the data", is they are requiring the service to log things they aren't logging at all now, rather than to hand over logs. How significant this difference is, you can argue, but that's the difference I think.
- swiley 5y ago>they are requiring the service to log things they aren't logging at all now That actually is a big deal, last I checked (in the US anyway) you're not really required to log much (if anything) as long as you can keep illegal content/abuse off your service.
- d4mi3n 5y agoThis depends a lot on context. For example, if you operate as a lender in the US finance industry, you're legally obligated to do things like: 1. Do KYC (Know Your Customer) checks to verify somebody's identity 2. Cross references customers to blacklists provided by the federal government (anti-money laundering laws, political sanctions, known fraudsters) 3. Maintain records of who you lent money to, when, for how much, and what the declared use of funds was Etc, etc. There are a lot of reasons in a lot of industries where you're required to keep records of things.
- swiley 5y agoThere are separate arguments for logging transactions (I don't think they're very good but they do exist.) I was just talking about messaging.
- jrochkind1 5y agoI think there are laws/regulations in the USA that require telecommunications providers or some term like that to do some logging too. I have a vague memory of being disapointed when they were passed, but can't recall what sorts of enterprises counted for them. But now I'm not succeeding in googling on it so could be wrong.