A Critique of Lavabit
>>There is no way to ever prove or disprove whether any encryption was ever happening at all, and whether it was or not makes little difference.<p>I get that Lavabit was fundamentally flawed, but I don't know about this part. Lavabit saying they can't read your email seems analogous to any website that requires a password saying they can't read your password, because it is hashed. That's an important and reasonable claim, right? It means at the very least all the passwords/emails can't be download in bulk and read immediately.<p>You don't know for sure what hashing methods are being used on any given site, but to say it <i>doesn't matter</i> at all.... is kind of like saying the operators should just leave all of your passwords in plaintext in the database because they could intercept them at log in anyway.