Live data from Hacker News

German court forces mail provider Tutanota to insert a backdoor

heise.de

31–40 of 103 posts

Re: German court forces mail provider Tutanota to insert a backdoor

#31

Encryption is the only thing that forces law enforcement to use warrants, without it it's just a wild wild west of privacy abuse. I do hope we see more services crop up, and new methods for people to encrypt email outside of specific services, maybe better plugins for Thunderbird or something, hell I'd easily pay for such a plugin if someone else can communicate back and forth with me through it and it is encrypted.…

[deleted]

Re: German court forces mail provider Tutanota to insert a backdoor

#32

Encryption is the only thing that forces law enforcement to use warrants, without it it's just a wild wild west of privacy abuse. I do hope we see more services crop up, and new methods for people to encrypt email outside of specific services, maybe better plugins for Thunderbird or something, hell I'd easily pay for such a plugin if someone else can communicate back and forth with me through it and it is encrypted.…

We generally accept that warrants are a reasonable solution when it comes to the state entering private property without permission for law enforcement purposes.

This also seems like a reasonable solution for encryption. The state here is not making or trying to make encryption illegal; and it is open about the fact that court authorisation is required to enforce a backdoor.

Re: German court forces mail provider Tutanota to insert a backdoor

#35

From my understanding of the article (non-native), it seems like it is only one specific mailbox that is to be monitored > "Tutanota sieht sich nun gezwungen, bis Jahresende eine Funktion zu programmieren...dieses Postfach zu überwachen." and that nothing else will change for the other users > "Für die anderen Nutzer soll sich dadurch nichts ändern, ihre Mails sollen weiter standardmäßig verschlüsselt werden" As othe…

Yeah german here you are correct. > Tutanota will Beschwerde gegen den Beschluss einlegen, diese hat jedoch keine aufschiebende Wirkung Tutanota wants to appeal in court against this, but is forced to comply (right now). > "Tutanota sieht sich nun gezwungen, bis Jahresende eine Funktion zu programmieren...dieses Postfach zu überwachen." Tutanota sees no other possibility than to program a function (until the end of t…

I wonder how a company that uses 100% open source software would comply with an order like this.

    def decrypt_email?(email) do
      email in surveilance_order_emails()
    end

Re: German court forces mail provider Tutanota to insert a backdoor

#36

Earlier quoted context omitted.

Yeah german here you are correct. > Tutanota will Beschwerde gegen den Beschluss einlegen, diese hat jedoch keine aufschiebende Wirkung Tutanota wants to appeal in court against this, but is forced to comply (right now). > "Tutanota sieht sich nun gezwungen, bis Jahresende eine Funktion zu programmieren...dieses Postfach zu überwachen." Tutanota sees no other possibility than to program a function (until the end of t…

I wonder how a company that uses 100% open source software would comply with an order like this. def decrypt_email?(email) do email in surveilance_order_emails() end

Not a lawyer and I am just speculating but in the US I believe it would likely result in the court compelling the maintainer of the libraries in question to comply with the original order, or issue new orders to compel the parties in question given the new information.

Re: German court forces mail provider Tutanota to insert a backdoor

#37

Earlier quoted context omitted.

Yeah german here you are correct. > Tutanota will Beschwerde gegen den Beschluss einlegen, diese hat jedoch keine aufschiebende Wirkung Tutanota wants to appeal in court against this, but is forced to comply (right now). > "Tutanota sieht sich nun gezwungen, bis Jahresende eine Funktion zu programmieren...dieses Postfach zu überwachen." Tutanota sees no other possibility than to program a function (until the end of t…

I wonder how a company that uses 100% open source software would comply with an order like this. def decrypt_email?(email) do email in surveilance_order_emails() end

You mean so that they do not leak the affected email address?

Re: German court forces mail provider Tutanota to insert a backdoor

#38

Earlier quoted context omitted.

I wonder how a company that uses 100% open source software would comply with an order like this. def decrypt_email?(email) do email in surveilance_order_emails() end

Not a lawyer and I am just speculating but in the US I believe it would likely result in the court compelling the maintainer of the libraries in question to comply with the original order, or issue new orders to compel the parties in question given the new information.

With most licenses couldn’t you use a fork?

Re: German court forces mail provider Tutanota to insert a backdoor

#39

Earlier quoted context omitted.

Yeah german here you are correct. > Tutanota will Beschwerde gegen den Beschluss einlegen, diese hat jedoch keine aufschiebende Wirkung Tutanota wants to appeal in court against this, but is forced to comply (right now). > "Tutanota sieht sich nun gezwungen, bis Jahresende eine Funktion zu programmieren...dieses Postfach zu überwachen." Tutanota sees no other possibility than to program a function (until the end of t…

I wonder how a company that uses 100% open source software would comply with an order like this. def decrypt_email?(email) do email in surveilance_order_emails() end

It's not decrypting mails. Right now it looks like every incoming mail is encrypted with the public key of the recipient. What they need to do is more in the line of

  def encrypt_mail(email):
    if email.user=="badperson":
      store(email)
    else:
      store(encrypt(email))
Rather stupid to be honest since it's not obvious how new mails could help the car salesman (don't know what zulieferer should be in english... supplier?) in any way shape or form. Or do they want to know if the blackmailer sends more blackmails? Don't know, don't care. I'm just always shocked how such verdicts come to be.

PS Don't know how to properly format text here

Re: German court forces mail provider Tutanota to insert a backdoor

#40
post #6

I worked in the telecom industry, and knowing how much surveillance related regulations was there, I can't believe true e2e encryption is a thing on the internet. I'm surprised how so many people in tech believe that a messaging application like WhatsApp is allowed to have real e2e encryption. It's impossible for regulators to ignore a platform with substantial traffic.

Where do you work, if you don't mind my asking? The Telecom Industry is really all-encompassing these days.
Post reply on HN