4 ms·
Had Lavabit had in place measures to prevent disclosure of its master key, it would have been unable to comply with the ultimate court order Is this
by malandrew 13y ago
Had Lavabit had in place measures to prevent disclosure of
its master key, it would have been unable to comply with
the ultimate court order
Is this possible? Can you have a system that allows you access, but doesn't allow you to give access to others? Or is it possible to make a system that not even you have access to and still be maintainable?
Edit: Upon thinking about this further, couldn't a solution to the byzantine general's problem like how bitcoin works solve this?
e.g. Thinking outside the box here, what if every person who uses the mail system has to collectively solve some hashing problem based on the source code or system change where the solution allows the software patch or upgrade to be applied. If 50% of more of the users solve the hashing problem after inspecting the code, the patch would be applied.
- venomsnake 13y agoWell actually it is not that hard. The key is in escrow in another jurisdiction with dead man's switch and store it only in ram locally. When the legal order comes you just shut down the service and wait until the key is destroyed. You can also rig the machine on which the key is used with something nasty that will melt it inside against physical tampering - lets call it SWAT raid protection. Disclaimer - IANAL
- Spoom 13y agoI'm still convinced that triggering such a dead man's switch would be tantamount to destruction of evidence. Courts aren't stupid.