3 ms·
But if the government can confiscate the server they also can make it deliver modified JS. If you can't trust the server you also can't trust the JS it gives yo
by ema 14y ago
But if the government can confiscate the server they also can make it deliver modified JS. If you can't trust the server you also can't trust the JS it gives you.
- cantos 14y agoYes. The purpose of using crypto is so that there is no less expensive and time consuming way to get the data then going after the server itself.
- DanBC 14y agoHushmail uses Java (not Javascript) cryptography. They pushed modified client software to some users after a Canadian court issued a court order. (http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/ http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/) (http://arstechnica.com/security/2007/11/secure-hushmail-can-still-talk-to-the-feds/ http://arstechnica.com/security/2007/11/secure-hushmail-can-...) Getting a court order doesn't seem particularly hard; it's certainly not the full might of the NSA applied to cracking the crypto.
- mosselman 14y agoKind of defeats the purpose for paranoid anti-government types I guess. Good way to lose your clientele.