Comments on: Legal Issues for Anonymous Encryption

By: Customer Support & Email Policy « PassPack Blog

Customer Support & Email Policy « PassPack Blog — Sat, 10 Nov 2007 21:36:56 +0000

[...] in June we started agonizing over email – our lawyer advised* that we collect them. Um… ok. So with [...]

By: Ramesh Bhaskar

Ramesh Bhaskar — Fri, 15 Jun 2007 18:24:42 +0000

Yep it does :) . I was thinking along the same lines. Am waiting for the smart button feature.

By: Tara

Tara — Fri, 15 Jun 2007 09:06:09 +0000

Hello Ramesh,
Passpack can do automatic updates on all of its algorithms. As you imagined, this can’t happen on the server because we don’t have your Packing Key, but as soon as you connect to your account after we’ve set up an new version, the automatic update will happen in your browser.

For example, we’ve done this in the past with 100% success (no data loss) and we’ll be doing it again shortly with the upcoming Beta 5 release.

Does that answer your question?

Cheers,
Tara

By: Ramesh Bhaskar

Ramesh Bhaskar — Thu, 14 Jun 2007 20:51:16 +0000

I was wondering, consider the application is used over a long period of time (say 10 years). Encryption algorithms change over time and older algorithms are broken.

If an algorithm being used by Passpack is broken and/or you need to change the algorithm, how would you do so? Since you don’t have access to our data how would you re-encrypt it using the new algorithm?

By: Ronnie

Ronnie — Mon, 11 Jun 2007 18:26:46 +0000

Yes, that makes sense. I was afraid the data would be unencrypted and then handed over.

By: Tara

Tara — Mon, 11 Jun 2007 18:07:48 +0000

@Ronnie
I’m glad you brought this up. It’s a key point: Passpack can not decrypt your pack.

So even if we were required to “hand it over”, it’s still encrypted. This is why encryption is illegal in some countries.

However, should we be asked to provide information about our clients, we need to be able to do that. That’s the reason for the email.

Does that make more sense?

By: Ronnie

Ronnie — Mon, 11 Jun 2007 17:35:50 +0000

I don’t mind providing an email address for my account, however, the thought of you (or your company) being able to hand over my data to law enforcement is a little scary. I thought there was no way Passpack could decrypt someone’s account?

Not that I will ever be doing anything that law enforcement would need my data. It just seems like the service will be less secure.

By: Tara

Tara — Mon, 11 Jun 2007 13:35:13 +0000

@Delti Pi
Whatever your preference. :)

By: Delta Pi

Delta Pi — Mon, 11 Jun 2007 06:36:40 +0000

and which kind of email address are you going to use to “identify” the user?
hotmail? bigfoot?

By: Purple Lemon » Blog Archive » The Additional Secret of The Movie The Secret

Mon, 11 Jun 2007 00:56:59 +0000

[...] Legal Issues for Anonymous Encryption Passpack s new Beta 5 release is very much a turning point. Not only are we undergoing an … . Technorati Tags: Passpack, password manager, passwords, security, l [...]