The problem with Lavabit was not primarily the jurisdiction in which it operated. The primary problem is an architecture where keys are held on third party ser

The problem with Lavabit was not primarily the jurisdiction in which it operated. The primary problem is an architecture where keys are held on third party servers and cryptographic code is secured only with an https connection. We need to design our services to be robust and transparent in hostile jurisdictions rather than resting on the relatively weak privacy assurances of nation states.