[liberationtech] Security / reliability of cryptoheaven ?

[Brian Conley]

Thanks for the interesting discussion, but its gone far afield from the
original question.

Does cryptoheaven seem like a reasonable tool to depend on for journalists
or businesses requiring security for their communications?

Is it notably better or worse than gmail if you are not concerned about the
us or it's allies as part of your threat model?

My impression is that it may not be hugely different than a reliable ssl
system.(I am well aware there are huge security.holes in such a phrase.)

>From what I understand cryptoheaven has encryption done on user side but
claims not to access this information when encrypted on its servers and
does not store unencrypted emails on the users device. However a nonsecure
user (one not using cryptoheaven) can access an.encrypted message by
answering a question, so some access is clearly possible from the service
providers side.

Thanks again
Brian
On 9 Oct 2012 22:54, "Jacob Appelbaum" <jacob at appelbaum.net> wrote:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20121009/746f07e8/attachment.html>