Re: Hushmail CTO interviewed (Re: Hushmail in U.S. v. Tyler Stumbo)

2007-11-16 Thread auto37159
http://blog.wired.com/27bstroke6/hushmail-privacy.html I was impressed by Hushmail?s candor in the above email exchange. They generally have been open with their statements. OTOH I was quite disappointed, actually worse than that, about the content of their answers. Hushmail seemed to have

Re: forward-secrecy for email? (Re: Hushmail in U.S. v. Tyler Stumbo)

2007-11-08 Thread Ian G
Adam Back wrote: On Fri, Nov 02, 2007 at 06:23:30PM +0100, Ian G wrote: I was involved in one case where super-secret stuff was shared through hushmail, and was also dual encrypted with non-hushmail-PGP for added security. In the end, the lawyers came in and scarfed up the lot with subpoenas

Re: forward-secrecy for email? (Re: Hushmail in U.S. v. Tyler Stumbo)

2007-11-08 Thread James A. Donald
an G wrote: I was involved in one case where super-secret stuff was shared through hushmail, and was also dual encrypted with non-hushmail-PGP for added security. In the end, the lawyers came in and scarfed up the lot with subpoenas ... all the secrets were revealed to everyone they should

Re: Hushmail in U.S. v. Tyler Stumbo

2007-11-06 Thread Allen
StealthMonger wrote: [snip] The larger truth is that a consequence of using Hushmail is that record of when, with whom, and the size of each communication is available to Hush, even though the content is concealed. So the obvious point is that Hushmail, and systems like it, become

Re: Hushmail in U.S. v. Tyler Stumbo

2007-11-05 Thread Jon Callas
I don't know anything about this case, so everything I say is pure supposition. Let's suppose you have Alice and Bob who are working together on some sort of business, and they are using some OpenPGP [1] software to encrypt their emails that pertain to that business. Let's suppose that

Re: Hushmail in U.S. v. Tyler Stumbo

2007-11-01 Thread Jon Callas
On Nov 1, 2007, at 10:49 AM, John Levine wrote: Since email between hushmail accounts is generally PGPed. (That is the point, right?) Hushmail is actually kind of a scam. In its normal configuration, it's in effect just webmail with an HTTPS connection and a long password. It will