3 ms·
I'm not so sure about that. See for example hushmail in 2007: http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/ http://www.wired.com/threatlevel/2007/11
by nona 13y ago
I'm not so sure about that. See for example hushmail in 2007:
http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/ http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/
While with this specific case here they intercepted the passphrase server-side, they specifically hinted that it wouldn't have made a difference with their java applet.
"The extra security given by the Java applet is not particularly relevant, in the practical sense, if an individual account is targeted"
- DenisM 13y agoReading preceding paragraph to the phrase you quoted, the context implies to me they discuss whether architecture prevents hushmail from bugging java applet (it does not). They do not talk about whether they can be legally compelled to do so.