Comments on: Exchange Secure & Encrypted Emails with VaultletSuite

By: Abc

Abc — Sat, 30 Apr 2011 17:03:00 +0000

The computers and the encryption are mere toys compared to what Big Bro uses,a computer is a spy gadget i.e., control of the masses,rules are made to be broken,so
fugitadoutit f00.

By: Schmoe

Schmoe — Sat, 30 Apr 2011 16:30:00 +0000

If one has reason to use encryption software, than they have reason to be paranoid. I am not in the boat by the way.

Govt does not need the ability to decrypt in this case. They need only serve a warrant/subpoena/ court order (whatever the proper legal term is) and have VaultletSuite decrypt it for them. That is why you want the key to be stored on the client side, where VaultletSuite doesn’t have access to the key. That is why you prefer the service provider be outside the US, so they don’t have to respond to US court orders.

By: Mulder

Mulder — Fri, 29 Apr 2011 20:19:00 +0000

It seems you’re going a bit overboard on the paranoia. Anyone using a widely accepted and vetted public key encryption algorithm is fully protected against decryption by anyone. No government has the ability to decrypt them (at least, not before 10,000 years have passed).

That’s precisely the reason why the U.S. government would love to force encryption vendors to build in backdoor methods to decrypt such messages and files, but it will never happen, since it wouldn’t be very easy, and it would make all such messages (including those generated by the government) vulnerable to decryption.

By: schmoe

schmoe — Fri, 29 Apr 2011 19:07:00 +0000

I could be mistaken on VaultletSuite capabilities. All I know about the product is what I read here. But the product as described sounds very lame. Some weaknesses:
- Both parties need to be VaultletSuite users
- VaultletSuite users have to install software.
- A good encryption service will encrypt and decrypt everything on the client side. It would be designed such that nobody at VaultletSuite could decrypt the emails even if they wanted. I didn’t read any guarantees that this is the case at VaultletSuite.
- It would most optimal if VaultletSuite was designed at some small obscure tourist country with stable govt and stable population. A govt that is not very interested in snooping. Consider Hushmail, a US company, they were forced by warrants to reveal encrypted emails.

By: Dom

Dom — Fri, 29 Apr 2011 18:41:00 +0000

great post as always. Thank you all for your informative content.
Dom