Hacker News Reader

Thanks for the information.

One similarity between Lavabit and Skiff is that tptacek calls them both non-end-to-end encrypted.

It's very simple. One of them had access to user's private keys (Lavabit).

One never has access to user private keys (Skiff).

I don't understand how you don't have exactly the same access they did. I feel like I've invested a fair bit of time to understanding how this stuff works, and the story you're telling doesn't make sense. What am I missing?

What amilich said is correct. However, what he is leaving out is that both have access to unencrypted email at send and recieve time, so you are taking Skiffs word that they dont log emails - since you have to trust the server this is not e2ee.

Reply on news.ycombinator.com