Lavabit Reloaded

Trustful seems like a strange way to refer to the insecure mode. It is indeed full of trust, but not in the way a normal read would suggest: it requires full trust in Lavabit's hosting provider and administrator.

If you're going to operate in "trustful" mode, lavabit isny offering any real security wins over any other mail host.

Re: Lavabit Reloaded

#6

Post by ycmbntrthrwaway » Fri, Jan 20, 2017, 10:34 PM UTC

tinkersec wrote: post #4

Code for Magma Mail Server: https://github.com/lavabit/magma Code for DIME (Dark Internet Mail Environment): https://github.com/lavabit/libdime

I wonder if there are no updates or they are simply not pushed. Similar thing happened to Telegram [1]. Client is open-source and functional, but Google Play version is not what you can build from the source.

Explain Lavabit page phrases it like Magma supports only Trusted mode: "We envision Trustful mode as the mode of choice for businesses, which have regulatory requirements, data retention practices, and unique needs like escrow keys. Lavabit’s free and open source server, Magma, supports these users." Are other modes supported?

[1] https://github.com/DrKLO/Telegram

[2] https://lavabit.com/explain-lavabit.html

UPDATE: https://twitter.com/kingladar/status/822583975067713536

"The website is live, but it will take another day or so to finish deploying magma, and get the latest code into Github."

Looks like code is just not pushed yet, it was just withheld until release.

Re: Lavabit Reloaded

#7

Post by codehusker » Fri, Jan 20, 2017, 10:34 PM UTC

Is there any person as trustworthy as Ladar Levison for a service like email or chat?

To my knowledge, he is one of the few that has gone to the mat for his users.

Re: Lavabit Reloaded

#8

Post by MaymayMaster » Fri, Jan 20, 2017, 10:35 PM UTC

codehusker wrote: post #7

Is there any person as trustworthy as Ladar Levison for a service like email or chat? To my knowledge, he is one of the few that has gone to the mat for his users.

Vincent Canfield

Re: Lavabit Reloaded

#9

Post by zymhan » Fri, Jan 20, 2017, 10:38 PM UTC

Any reason I shouldn't sign up right now?

edit: Signed up. Half off for life is a sweet deal.

Re: Lavabit Reloaded

#10

Post by ycmbntrthrwaway » Fri, Jan 20, 2017, 10:39 PM UTC

akerl_ wrote: post #5

Trustful seems like a strange way to refer to the insecure mode. It is indeed full of trust, but not in the way a normal read would suggest: it requires full trust in Lavabit's hosting provider and administrator. If you're going to operate in "trustful" mode, lavabit isny offering any real security wins over any other mail host.

> Former Lavabit users will be able to access their accounts in “Trustful” mode

Looks like Trustful mode is how the old lavabit operated.

> If you're going to operate in "trustful" mode, lavabit isny offering any real security wins over any other mail host.

This level of security apparently was enough to protect email contents against FBI.

The reason this "insecure" mode is kept is to allow users to continue using their old accounts and restore mailbox contents: https://lavabit.com/have-lavabit.html