And what software is performing the encryption? If they were using lavabit software then lavabit could push a mandatory update that breaks the encrypting process, merely pretending to encrypt the data… If the customer is using 3rd party software to perform the encryption client side, then there’s no point in using lavabit at all… they might as well just encrypt it locally and gmail the resulting blob of data.
1 Like