[liberationtech] Is spideroak really zero-knowledge?

Percy Alpha percyalpha at gmail.com
Mon Aug 12 22:35:37 PDT 2013


@Tom, "For this amount of time your password is stored in encrypted memory"
but to actually use the key, the key has to be in plain-text form for
sometime, during which it can be (forced to )intercepted.

If they can force Lavabit to intercept users' emails, why can't they ask
spideroak to secretly intercept users' moible app login?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20130812/00e08154/attachment.html>


More information about the liberationtech mailing list