9 ms·

Confidentiality at FastMail

136 points by brongondwana 12y ago

na85 12y ago
>We follow due process when dealing with law enforcement, providing individual data in response to the appropriate Australian warrant, so there is no justification to attempt wholesale surveillance of all our users. Except if Fastmail can decrypt user's data, then they can be compelled to backdoor their system, and also compelled to keep it quiet. Australia is part of the "5 eyes", after all, and from an outsider perspective their government seems particularly hostile/authoritarian. Failing that legal avenue, would Australia's intelligence services refuse to simply hack their way into Fastmail's servers if the NSA asked them to? Would the NSA refuse to just do it themselves, if it came to that? Surely not. The president (or whomever) of NYI would certainly not refuse entry to federal agents wanting to install an implant. NYI just has to report an outage, meanwhile Fastmail's servers have grown a new rootkit. And failing that, then it's time to bribe a security guard in the middle of the night. To me this reads as nothing more than Fastmail trying to provide a false sense of security.
- dangerlibrary 12y ago
  At least they don't decrypt and read your email as part of their business model.
- brongondwana 12y ago
  It is impossible to run an email service without being able to decrypt data. You can search your entire email archive in seconds, from a phone on the end of a slow network, and it just works. End-to-end encryption isn't compatible with the way people want to use email. We are happy for people to use PGP, though of course we don't offer an interface to it because that would involve sharing keys with us and defeat the purpose. We've addressed the legal framework we work in in the linked blogpost, and addressed precisely the scenario you lay out. Governments change, and they love to posture, but the reality is the laws, not the soundbytes. We would be aware of the outage - have you seen how reliable NYI are? http://blog.fastmail.com/2014/12/10/security-availability/ http://blog.fastmail.com/2014/12/10/security-availability/ They don't have outages. I'm much more worried about the NSA (or any of http://en.wikipedia.org/wiki/List_of_intelligence_agencies http://en.wikipedia.org/wiki/List_of_intelligence_agencies) knowing of a hole in one of the pieces of software that we use and injecting a rootkit with that. Thankfully the same security practices that defend against hackers are also useful here.
  - alfiedotwtf 12y ago
    To add to this, and this needs to be emphasised, is that we make it clear to anybody requesting data that there are legal channels with due process to go through which work. See the following for more info - http://blog.fastmail.com/2013/10/07/fastmails-servers-are-in-the-us-what-this-means-for-you/ http://blog.fastmail.com/2013/10/07/fastmails-servers-are-in...
    - sasas 12y ago
      https://www.youtube.com/watch?v=srk9c4rOgZ4 https://www.youtube.com/watch?v=srk9c4rOgZ4 Pretty scary isn't it?
      - hellbanner 12y ago
        Yes. Thanks for sharing this video. The minister refused to answer the guys question, just said "We collect what we need to do to our job, and stop asking this question."
      - ownagefool 12y ago
        One wonders if he's too stupid to understand the question, doesn't know the answer but can't be seen to not be answering, or if he's just trying to keep the options open. All of the above are scary. But this is not without precedence. The UK chancellor couldn't even answer which tax greggs should be paying.
  - na85 12y ago
    >It is impossible to run an email service without being able to decrypt data. Counterpoint: seems to me that protonmail is doing exactly that. >We've addressed the legal framework we work in in the linked blogpost, and addressed precisely the scenario you lay out. Governments change, and they love to posture, but the reality is the laws, not the soundbytes. You haven't addressed any of the points I initially raised. Your blog post skirts the issue quite handily. >They don't have outages. Anyone claiming 100% uptime are fraudsters.
    - 12y ago
- rayiner 12y ago
  > Except if Fastmail can decrypt user's data, then they can be compelled to backdoor their system, and also compelled to keep it quiet. Australia is part of the "5 eyes", after all, and from an outsider perspective their government seems particularly hostile/authoritarian. If you don't expect the government to follow any rules, then most of these discussions are moot. But what we've been seeing with the Snowden leaks is that the governments are at least attempting to walk the tightrope of legality. Here in the U.S., that means having at least plausible procedures to filter out non-foreigner communications, and going through legal processes like subpoenas instead of simply breaking into computer systems. These facts have practical concerns. Unless you hypothesize that the U.S. and Australia are putting citizens in prison using secret courts, the government still has to present evidence in a court proceeding, and that has to comport with the 4th amendment in the U.S., and whatever the equivalent is in Australia. The law in this area is rapidly evolving, but in my opinion as someone with both a legal and technical background, encryption like what Fastmail has gives 4th amendment arguments a lot more teeth. When your data is in an e-mail service that's readily accessible to the service provider, or even data-mined for advertising purposes, it's susceptible to the charge that it's not private information, because after all you're allowing someone else to rummage through it. But if there are protections in place, even if they can be circumvented if needed, that's different. Now you're talking about something that's more like a safe deposit box at a bank or a rented storage unit, which do have 4th amendment protection. They're locked, and only the owner accesses what's inside as a matter of course. The lock can be broken, in an emergency, but that doesn't change the fact that the owner of the facility does not access the contents as a matter of course.
  - sinak 12y ago
    > Unless you hypothesize that the U.S. and Australia are putting citizens in prison using secret courts, the government still has to present evidence in a court proceeding, and that has to comport with the 4th amendment in the U.S., and whatever the equivalent is in Australia. rayiner, how about the reports of "parallel construction" by the NSA? While it's true that the government still has to present evidence in a court, according to recent reports [1] the NSA "tips off" organizations like the DEA. 1 - http://www.washingtonpost.com/blogs/the-switch/wp/2013/08/05/the-nsa-is-giving-your-phone-records-to-the-dea-and-the-dea-is-covering-it-up/ http://www.washingtonpost.com/blogs/the-switch/wp/2013/08/05...
patronagezero 12y ago
Don't play this game unless you're not really interested in full confidentiality. Some people are willing to increase security to the point of protecting their financial interests without concerning themselves with security against nation-states, I think the future, if not the history as we already know it, will prove this to be foolish.
artichokeheart 12y ago
The whole protetcion under Australian law is a nice marketing spin. But that's all it is: https://www.eff.org/deeplinks/2014/09/australian-government-scrambles-authorize-mass-surveillance https://www.eff.org/deeplinks/2014/09/australian-government-...
moe 12y ago
We have spelled out in our privacy policy and public communications that we don’t participate in blanket surveillance. We are an Australian company, and to participate in such programs would be in violation of Australian law. Are you really this naive? Australia is a member of Five Eyes[1]. Your local laws don't apply to intelligence agencies. [1] http://en.wikipedia.org/wiki/Five_Eyes http://en.wikipedia.org/wiki/Five_Eyes
- robn_fastmail 12y ago
  You've completely misunderstood the line you quote. FastMail as a company do not participate in blanket surveillance. We can't control the actions of any one else, governments or otherwise.
  - middleclick 12y ago
    (Disclosure: I am a paying FastMail customer) Is there any reason why you put the sender's IP address when sending out a mail via SMTP? Sure you want to keep logs, but why put the IP address of people like me who pay you for the service (and thus, won't spam or anything)
  - moe 12y ago
    You say "FastMail as a company do not participate in blanket surveillance". And then, in your next sentence, you admit that this is actually not under your control. Why do you keep trying to make it sound as if FastMail had a choice in the matter even though you know that it doesn't?
    - robn_fastmail 12y ago
      I said governments and other third-party actors are not under our control. I never ever said that FastMail was not under our control. We do not participate in blanket surveillance. I am not sure how to make it any clearer than that. Perhaps you could tell me what you'd like us to say, and then I can tell you whether or not that's something we agree with?
brohoolio 12y ago
Fastmail is a great company. We worked with them when we were a cyrus mail shop.
sgentle 12y ago
In security it doesn't make sense to ask "is it compromised?" but rather "can it be compromised?" For that reason, I don't think "we don’t participate in blanket surveillance" and equivalent statements are even worth the pixels they take up on your screen. It may as well say "our security is endorsed by His Holiness The Dalai Lama" The Australian government has the power under the recently passed National Security Legislation Amendment [0] to issue a secret warrant compelling access to any number of computers or networks for anything that will "assist" in "obtaining intelligence related to security". The warrant allows surveillance, as well as "addition, deletion or alteration of data". Disclosing that warrant's existence is punishable by up to 10 years in jail. This is without even considering the reciprocal spying possibilities of the Five Eyes network. There is no equivalent in Australia to the US fourth amendment. Even illegally gathered evidence can be used in a trial depending on the discretion of the judge. [1] If you think "we don't participate in blanket surveillance" is an acceptable response to that legal reality, I ask you to consider what you would think of a company that, when asked if they store passwords in cleartext, respond "yes, but we don't look at them." [0] http://parlinfo.aph.gov.au/parlInfo/download/legislation/bills/s969_first-senate/toc_pdf/1417820.pdf;fileType=application%2Fpdf http://parlinfo.aph.gov.au/parlInfo/download/legislation/bil... [1] http://scholarship.law.wm.edu/cgi/viewcontent.cgi?article=1245&context=facpubs http://scholarship.law.wm.edu/cgi/viewcontent.cgi?article=12...
- npizzolato 12y ago
  In security it also doesn't make sense to ask "am I secure?" but instead to ask "how secure am I?". The money in my bank account isn't more secure from a government that wants to freeze my assets, but it is certainly more secure than the money under my mattress from a potential break in. You have to identify the targets you're concerned about before you can tell if you're "secure enough." And, for the most part, individuals don't need to be "secure enough" against spy networks of nations. Furthermore, and I think we're going to disagree here, I believe there is a balance to be played between trust, security, and following laws. For instance, a safe deposit box at a bank is generally secure. A bank won't usually open it, but they can if the need arises, and law enforcement can obtain the contents if they go through the proper channels and provide a warrant. In theory, I believe this to be an inherently good thing. The police must be able to pursue criminals, and, by providing evidence, be granted access to things they would otherwise be unable to access. I believe there to be a direct analogy between an email provider that does not routinely give access to its users emails but would respond to warrants as necessary. Now, I would be naive if I didn't realize that the spy agencies of the world weren't holding up to their government's part of the bargain here. But I believe the answer to be in government accountability, not completely locked down security. Aside from philosophical views, I also believe that this is a much more pragmatic approach. Do you know why people give up all their personal information, email, etc. to the Googles and Facebooks of the world? Because it's so goddamned convenient. Google provides so many great services for free. And full security is hard and inconvenient. You're going to have a tough pitch to sell fully encrypted email just on the basis of services not being able to provide a good search experience, because I gotta tell ya, Gmail search is really amazing, and it provides many people with tangible benefits. Fully encrypted email provides value that is much more intangible.
jpsim 12y ago
> We recently had respected independent security firm Matasano do a security audit Strangely, they don't mention the results of this audit, which struck me as odd, but then I found this: > Our most recent security audit, conducted by Matasano in October 2014, found no significant issues. (Source[0]) I just thought I'd share in case anyone else was wondering. [0] https://www.fastmail.com/help/ourservice/security.html?domain=fastmail.fm https://www.fastmail.com/help/ourservice/security.html?domai...
- brongondwana 12y ago
  Yeah, I figured that was kinda self evident. We wouldn't leave any security holes open. I guess I can edit the blog post to clarify this without changing the meaning any.
  - breakingcups 12y ago
    I'm curious about the insignificant issues.
    - brongondwana 12y ago
      Things like insecure SSL options (we knew that, but wanted to support older devices for a little longer - we've bitten the bullet and switched to SHA256 certs now, and turned off RC4) They recommended a bcrypt hashing factor which isn't realistic for fast responses, it would have pegged a core for over a second. A few things that were just testbed specific, and a couple of rate limits we had missed. Some "internal details leaked in errors" - in two minds about that. Sometimes it helps debug. We mostly log the verbose error internally now and give the user a unique key that makes log grepping easy. Harder to self-help if you hit an error we didn't make a nice error code for yet though and you have tech clue.
johnpowell 12y ago
Isn't it just common sense to assume email is in no way secure? If the government wants it they will torture you in Egypt to get all your keys and so on. I personally use fastmail but that is because I don't want google tying my email to browsing. I am pretty sure that if the NSA wants my stuff they will strap some 120V to Rob Mueller's testicles in a cave.
- robn_fastmail 12y ago
  Nah. If they want your stuff, they'd work through the appropriate Mutual Assistance Treaty to get an Australian court to issue a warrant, and then we'd comply with it and hand over your mail because we follow the law. Making a phone call is way easier and cheaper than giving RobM a free Mediterranean holiday :)
sandstrom 12y ago
I wish they would setup servers in another country, say Iceland (since they have some there already). Also, I'm thinking that Australia may not be an ideal jurisdiction if you want to run an email company that cares about privacy. The offering will never get any better than the worst of national laws [weakest link argument]. https://www.eff.org/deeplinks/2014/09/australian-government-scrambles-authorize-mass-surveillance https://www.eff.org/deeplinks/2014/09/australian-government-... http://theconversation.com/sweeping-security-law-would-have-computer-users-surrender-privacy-30041 http://theconversation.com/sweeping-security-law-would-have-...
- alfiedotwtf 12y ago
  Why do you think Iceland is safe from government access (even safe from the US government)? http://www.theverge.com/2013/10/14/4836994/dont-host-your-virtual-illegal-drug-bazaar-in-iceland-silk-road http://www.theverge.com/2013/10/14/4836994/dont-host-your-vi...
  - sandstrom 12y ago
    That may be a valid point, I'm not that familiar with Iceland. My hunch though, is that they'll probably cooperate in criminal cases, but that it will go through some judge. Also, I think there is much lower risk of dragnet surveillance or secret court orders.
Derbasti 12y ago
Basically, you need to use an email provider in your own country. Each country (hopefully) has laws to protect the privacy of its citizens. Such laws usually don't extend to non-citizens. Either that, or encrypt everything you do.
- danieldk 12y ago
  False. The safe harbor agreement between the US and the EU also gives EU citizens rights: http://europa.eu/rapid/press-release_SPEECH-14-27_en.htm http://europa.eu/rapid/press-release_SPEECH-14-27_en.htm So, ironically, it may be safer to store your data with a US company than an Australian company. Also, the EU believes (see linked page) that the NSA dragnet may be a violation of the safe harbor agreement.
  - junto 12y ago
    Correction - Wouldn't it be better as an EU citizen to store your data with an EU provider (I.e. a non-NSA partner)? The safe harbor agreement has been demonstrated to be patently false. The data wasn't ever safe. Every major US tech company has participated either willingly or forced through secret courts under threat of prison for non-compliance by individual employees. That's not 'safe'. It's a joke. It's a kangaroo court. It's non-democratic. It's anti-privacy. It's a conflict of EU basic human rights. I could go on. The EU has a responsibility to prevent EU citizen's data from leaving the EU, period. I hope they see it through and the safe harbor agreement is the first thing I'd rip up and throw in the the face of whichever kangaroo US President you have now or next time. Then Microsoft need to win their upcoming court case against the USG, which will demonstrate clearly to everyone that the USG cannot open the electronic equivalent of a private sealed letter stored in a bank safe in Ireland, because they damn well feel like it. The US constitution needs another amendment to protect the privacy rights of all, regardless of whether they are US citizens or not. It is time the citizens of the US started pushing for it. These three letter agencies with their massive black budgets funded by narcotics are your mess and it is time you sorted them out. I'll leave this here: http://en.wikipedia.org/wiki/Buridan%27s_ass http://en.wikipedia.org/wiki/Buridan%27s_ass
hso1 12y ago
All this goes away when we exchange messages with other providers (eg: Gmail).

136 points by brongondwana 12y ago

na85 12y ago

>We follow due process when dealing with law enforcement, providing individual data in response to the appropriate Australian warrant, so there is no justification to attempt wholesale surveillance of all our users. Except if Fastmail can decrypt user's data, then they can be compelled to backdoor their system, and also compelled to keep it quiet. Australia is part of the "5 eyes", after all, and from an outsider perspective their government seems particularly hostile/authoritarian. Failing that legal avenue, would Australia's intelligence services refuse to simply hack their way into Fastmail's servers if the NSA asked them to? Would the NSA refuse to just do it themselves, if it came to that? Surely not. The president (or whomever) of NYI would certainly not refuse entry to federal agents wanting to install an implant. NYI just has to report an outage, meanwhile Fastmail's servers have grown a new rootkit. And failing that, then it's time to bribe a security guard in the middle of the night. To me this reads as nothing more than Fastmail trying to provide a false sense of security.

dangerlibrary 12y ago
At least they don't decrypt and read your email as part of their business model.
brongondwana 12y ago
It is impossible to run an email service without being able to decrypt data. You can search your entire email archive in seconds, from a phone on the end of a slow network, and it just works. End-to-end encryption isn't compatible with the way people want to use email. We are happy for people to use PGP, though of course we don't offer an interface to it because that would involve sharing keys with us and defeat the purpose. We've addressed the legal framework we work in in the linked blogpost, and addressed precisely the scenario you lay out. Governments change, and they love to posture, but the reality is the laws, not the soundbytes. We would be aware of the outage - have you seen how reliable NYI are? http://blog.fastmail.com/2014/12/10/security-availability/ http://blog.fastmail.com/2014/12/10/security-availability/ They don't have outages. I'm much more worried about the NSA (or any of http://en.wikipedia.org/wiki/List_of_intelligence_agencies http://en.wikipedia.org/wiki/List_of_intelligence_agencies) knowing of a hole in one of the pieces of software that we use and injecting a rootkit with that. Thankfully the same security practices that defend against hackers are also useful here.
- alfiedotwtf 12y ago
  To add to this, and this needs to be emphasised, is that we make it clear to anybody requesting data that there are legal channels with due process to go through which work. See the following for more info - http://blog.fastmail.com/2013/10/07/fastmails-servers-are-in-the-us-what-this-means-for-you/ http://blog.fastmail.com/2013/10/07/fastmails-servers-are-in...
  - sasas 12y ago
    https://www.youtube.com/watch?v=srk9c4rOgZ4 https://www.youtube.com/watch?v=srk9c4rOgZ4 Pretty scary isn't it?
    - hellbanner 12y ago
      Yes. Thanks for sharing this video. The minister refused to answer the guys question, just said "We collect what we need to do to our job, and stop asking this question."
    - ownagefool 12y ago
      One wonders if he's too stupid to understand the question, doesn't know the answer but can't be seen to not be answering, or if he's just trying to keep the options open. All of the above are scary. But this is not without precedence. The UK chancellor couldn't even answer which tax greggs should be paying.
- na85 12y ago
  >It is impossible to run an email service without being able to decrypt data. Counterpoint: seems to me that protonmail is doing exactly that. >We've addressed the legal framework we work in in the linked blogpost, and addressed precisely the scenario you lay out. Governments change, and they love to posture, but the reality is the laws, not the soundbytes. You haven't addressed any of the points I initially raised. Your blog post skirts the issue quite handily. >They don't have outages. Anyone claiming 100% uptime are fraudsters.
  - 12y ago
rayiner 12y ago
> Except if Fastmail can decrypt user's data, then they can be compelled to backdoor their system, and also compelled to keep it quiet. Australia is part of the "5 eyes", after all, and from an outsider perspective their government seems particularly hostile/authoritarian. If you don't expect the government to follow any rules, then most of these discussions are moot. But what we've been seeing with the Snowden leaks is that the governments are at least attempting to walk the tightrope of legality. Here in the U.S., that means having at least plausible procedures to filter out non-foreigner communications, and going through legal processes like subpoenas instead of simply breaking into computer systems. These facts have practical concerns. Unless you hypothesize that the U.S. and Australia are putting citizens in prison using secret courts, the government still has to present evidence in a court proceeding, and that has to comport with the 4th amendment in the U.S., and whatever the equivalent is in Australia. The law in this area is rapidly evolving, but in my opinion as someone with both a legal and technical background, encryption like what Fastmail has gives 4th amendment arguments a lot more teeth. When your data is in an e-mail service that's readily accessible to the service provider, or even data-mined for advertising purposes, it's susceptible to the charge that it's not private information, because after all you're allowing someone else to rummage through it. But if there are protections in place, even if they can be circumvented if needed, that's different. Now you're talking about something that's more like a safe deposit box at a bank or a rented storage unit, which do have 4th amendment protection. They're locked, and only the owner accesses what's inside as a matter of course. The lock can be broken, in an emergency, but that doesn't change the fact that the owner of the facility does not access the contents as a matter of course.
- sinak 12y ago
  > Unless you hypothesize that the U.S. and Australia are putting citizens in prison using secret courts, the government still has to present evidence in a court proceeding, and that has to comport with the 4th amendment in the U.S., and whatever the equivalent is in Australia. rayiner, how about the reports of "parallel construction" by the NSA? While it's true that the government still has to present evidence in a court, according to recent reports [1] the NSA "tips off" organizations like the DEA. 1 - http://www.washingtonpost.com/blogs/the-switch/wp/2013/08/05/the-nsa-is-giving-your-phone-records-to-the-dea-and-the-dea-is-covering-it-up/ http://www.washingtonpost.com/blogs/the-switch/wp/2013/08/05...

patronagezero 12y ago

Don't play this game unless you're not really interested in full confidentiality. Some people are willing to increase security to the point of protecting their financial interests without concerning themselves with security against nation-states, I think the future, if not the history as we already know it, will prove this to be foolish.

artichokeheart 12y ago

The whole protetcion under Australian law is a nice marketing spin. But that's all it is: https://www.eff.org/deeplinks/2014/09/australian-government-scrambles-authorize-mass-surveillance https://www.eff.org/deeplinks/2014/09/australian-government-...

moe 12y ago

We have spelled out in our privacy policy and public communications that we don’t participate in blanket surveillance. We are an Australian company, and to participate in such programs would be in violation of Australian law. Are you really this naive? Australia is a member of Five Eyes[1]. Your local laws don't apply to intelligence agencies. [1] http://en.wikipedia.org/wiki/Five_Eyes http://en.wikipedia.org/wiki/Five_Eyes

robn_fastmail 12y ago
You've completely misunderstood the line you quote. FastMail as a company do not participate in blanket surveillance. We can't control the actions of any one else, governments or otherwise.
- middleclick 12y ago
  (Disclosure: I am a paying FastMail customer) Is there any reason why you put the sender's IP address when sending out a mail via SMTP? Sure you want to keep logs, but why put the IP address of people like me who pay you for the service (and thus, won't spam or anything)
- moe 12y ago
  You say "FastMail as a company do not participate in blanket surveillance". And then, in your next sentence, you admit that this is actually not under your control. Why do you keep trying to make it sound as if FastMail had a choice in the matter even though you know that it doesn't?
  - robn_fastmail 12y ago
    I said governments and other third-party actors are not under our control. I never ever said that FastMail was not under our control. We do not participate in blanket surveillance. I am not sure how to make it any clearer than that. Perhaps you could tell me what you'd like us to say, and then I can tell you whether or not that's something we agree with?

brohoolio 12y ago

Fastmail is a great company. We worked with them when we were a cyrus mail shop.

sgentle 12y ago

In security it doesn't make sense to ask "is it compromised?" but rather "can it be compromised?" For that reason, I don't think "we don’t participate in blanket surveillance" and equivalent statements are even worth the pixels they take up on your screen. It may as well say "our security is endorsed by His Holiness The Dalai Lama" The Australian government has the power under the recently passed National Security Legislation Amendment [0] to issue a secret warrant compelling access to any number of computers or networks for anything that will "assist" in "obtaining intelligence related to security". The warrant allows surveillance, as well as "addition, deletion or alteration of data". Disclosing that warrant's existence is punishable by up to 10 years in jail. This is without even considering the reciprocal spying possibilities of the Five Eyes network. There is no equivalent in Australia to the US fourth amendment. Even illegally gathered evidence can be used in a trial depending on the discretion of the judge. [1] If you think "we don't participate in blanket surveillance" is an acceptable response to that legal reality, I ask you to consider what you would think of a company that, when asked if they store passwords in cleartext, respond "yes, but we don't look at them." [0] http://parlinfo.aph.gov.au/parlInfo/download/legislation/bills/s969_first-senate/toc_pdf/1417820.pdf;fileType=application%2Fpdf http://parlinfo.aph.gov.au/parlInfo/download/legislation/bil... [1] http://scholarship.law.wm.edu/cgi/viewcontent.cgi?article=1245&context=facpubs http://scholarship.law.wm.edu/cgi/viewcontent.cgi?article=12...

npizzolato 12y ago
In security it also doesn't make sense to ask "am I secure?" but instead to ask "how secure am I?". The money in my bank account isn't more secure from a government that wants to freeze my assets, but it is certainly more secure than the money under my mattress from a potential break in. You have to identify the targets you're concerned about before you can tell if you're "secure enough." And, for the most part, individuals don't need to be "secure enough" against spy networks of nations. Furthermore, and I think we're going to disagree here, I believe there is a balance to be played between trust, security, and following laws. For instance, a safe deposit box at a bank is generally secure. A bank won't usually open it, but they can if the need arises, and law enforcement can obtain the contents if they go through the proper channels and provide a warrant. In theory, I believe this to be an inherently good thing. The police must be able to pursue criminals, and, by providing evidence, be granted access to things they would otherwise be unable to access. I believe there to be a direct analogy between an email provider that does not routinely give access to its users emails but would respond to warrants as necessary. Now, I would be naive if I didn't realize that the spy agencies of the world weren't holding up to their government's part of the bargain here. But I believe the answer to be in government accountability, not completely locked down security. Aside from philosophical views, I also believe that this is a much more pragmatic approach. Do you know why people give up all their personal information, email, etc. to the Googles and Facebooks of the world? Because it's so goddamned convenient. Google provides so many great services for free. And full security is hard and inconvenient. You're going to have a tough pitch to sell fully encrypted email just on the basis of services not being able to provide a good search experience, because I gotta tell ya, Gmail search is really amazing, and it provides many people with tangible benefits. Fully encrypted email provides value that is much more intangible.

jpsim 12y ago

> We recently had respected independent security firm Matasano do a security audit Strangely, they don't mention the results of this audit, which struck me as odd, but then I found this: > Our most recent security audit, conducted by Matasano in October 2014, found no significant issues. (Source[0]) I just thought I'd share in case anyone else was wondering. [0] https://www.fastmail.com/help/ourservice/security.html?domain=fastmail.fm https://www.fastmail.com/help/ourservice/security.html?domai...

brongondwana 12y ago
Yeah, I figured that was kinda self evident. We wouldn't leave any security holes open. I guess I can edit the blog post to clarify this without changing the meaning any.
- breakingcups 12y ago
  I'm curious about the insignificant issues.
  - brongondwana 12y ago
    Things like insecure SSL options (we knew that, but wanted to support older devices for a little longer - we've bitten the bullet and switched to SHA256 certs now, and turned off RC4) They recommended a bcrypt hashing factor which isn't realistic for fast responses, it would have pegged a core for over a second. A few things that were just testbed specific, and a couple of rate limits we had missed. Some "internal details leaked in errors" - in two minds about that. Sometimes it helps debug. We mostly log the verbose error internally now and give the user a unique key that makes log grepping easy. Harder to self-help if you hit an error we didn't make a nice error code for yet though and you have tech clue.

johnpowell 12y ago

Isn't it just common sense to assume email is in no way secure? If the government wants it they will torture you in Egypt to get all your keys and so on. I personally use fastmail but that is because I don't want google tying my email to browsing. I am pretty sure that if the NSA wants my stuff they will strap some 120V to Rob Mueller's testicles in a cave.

robn_fastmail 12y ago
Nah. If they want your stuff, they'd work through the appropriate Mutual Assistance Treaty to get an Australian court to issue a warrant, and then we'd comply with it and hand over your mail because we follow the law. Making a phone call is way easier and cheaper than giving RobM a free Mediterranean holiday :)

sandstrom 12y ago

I wish they would setup servers in another country, say Iceland (since they have some there already). Also, I'm thinking that Australia may not be an ideal jurisdiction if you want to run an email company that cares about privacy. The offering will never get any better than the worst of national laws [weakest link argument]. https://www.eff.org/deeplinks/2014/09/australian-government-scrambles-authorize-mass-surveillance https://www.eff.org/deeplinks/2014/09/australian-government-... http://theconversation.com/sweeping-security-law-would-have-computer-users-surrender-privacy-30041 http://theconversation.com/sweeping-security-law-would-have-...

alfiedotwtf 12y ago
Why do you think Iceland is safe from government access (even safe from the US government)? http://www.theverge.com/2013/10/14/4836994/dont-host-your-virtual-illegal-drug-bazaar-in-iceland-silk-road http://www.theverge.com/2013/10/14/4836994/dont-host-your-vi...
- sandstrom 12y ago
  That may be a valid point, I'm not that familiar with Iceland. My hunch though, is that they'll probably cooperate in criminal cases, but that it will go through some judge. Also, I think there is much lower risk of dragnet surveillance or secret court orders.

Derbasti 12y ago

Basically, you need to use an email provider in your own country. Each country (hopefully) has laws to protect the privacy of its citizens. Such laws usually don't extend to non-citizens. Either that, or encrypt everything you do.

danieldk 12y ago
False. The safe harbor agreement between the US and the EU also gives EU citizens rights: http://europa.eu/rapid/press-release_SPEECH-14-27_en.htm http://europa.eu/rapid/press-release_SPEECH-14-27_en.htm So, ironically, it may be safer to store your data with a US company than an Australian company. Also, the EU believes (see linked page) that the NSA dragnet may be a violation of the safe harbor agreement.
- junto 12y ago
  Correction - Wouldn't it be better as an EU citizen to store your data with an EU provider (I.e. a non-NSA partner)? The safe harbor agreement has been demonstrated to be patently false. The data wasn't ever safe. Every major US tech company has participated either willingly or forced through secret courts under threat of prison for non-compliance by individual employees. That's not 'safe'. It's a joke. It's a kangaroo court. It's non-democratic. It's anti-privacy. It's a conflict of EU basic human rights. I could go on. The EU has a responsibility to prevent EU citizen's data from leaving the EU, period. I hope they see it through and the safe harbor agreement is the first thing I'd rip up and throw in the the face of whichever kangaroo US President you have now or next time. Then Microsoft need to win their upcoming court case against the USG, which will demonstrate clearly to everyone that the USG cannot open the electronic equivalent of a private sealed letter stored in a bank safe in Ireland, because they damn well feel like it. The US constitution needs another amendment to protect the privacy rights of all, regardless of whether they are US citizens or not. It is time the citizens of the US started pushing for it. These three letter agencies with their massive black budgets funded by narcotics are your mess and it is time you sorted them out. I'll leave this here: http://en.wikipedia.org/wiki/Buridan%27s_ass http://en.wikipedia.org/wiki/Buridan%27s_ass

hso1 12y ago

All this goes away when we exchange messages with other providers (eg: Gmail).