Lavabit SSL Cert Revoked

To my understanding this is what I would expect to happen. He handed over the cert to the FBI, so from a security standpoint it's useless now and should be considered compromised.

Re: Lavabit SSL Cert Revoked

#5

Post by conductor » Tue, Oct 08, 2013, 8:57 PM UTC

WestCoastJustin wrote: post #3

Can someone weight in on what this means or why it is an issue?

Ladar Levison was forced to give Lavabit's SSL private key to the feds, so it is no more secure. That's why he (or GaDaddy, the issuer) revoked the certificate.

Re: Lavabit SSL Cert Revoked

#6

Post by miketucker » Tue, Oct 08, 2013, 8:58 PM UTC

WestCoastJustin wrote: post #3

Can someone weight in on what this means or why it is an issue?

Today the owner, Ladar Levison, had to hand over the SSL certificates by court order. It marks the ending of a long battle in court, with unfortunately it ending in the govenment's favor. I'm assuming the post is just a hacker way of acknowledging the event.

Re: Lavabit SSL Cert Revoked

#7

Post by ihsw » Tue, Oct 08, 2013, 9:03 PM UTC

It would be interesting to see it be re-instated at the behest of the FBI.

Re: Lavabit SSL Cert Revoked

#8

Post by jpinkerton88 » Tue, Oct 08, 2013, 9:04 PM UTC

That's awesome that the certificate authority is being proactive.

Re: Lavabit SSL Cert Revoked

#9

Post by alextingle » Tue, Oct 08, 2013, 9:07 PM UTC

And this is exactly why perfect forward secrecy is so important.

Re: Lavabit SSL Cert Revoked

#10

Post by Fzzr » Tue, Oct 08, 2013, 9:08 PM UTC

jpinkerton88 wrote: post #8

That's awesome that the certificate authority is being proactive.

Is it clear that's the case? Or is it possible that this was upon request from Levison?