On: OpenPGPjs has passed an independent security audit

[digianarchist]

Remember when Hushmail backdoored their client-side applet to capture unencrypted emails and passwords?

[0xbadcafebee → digianarchist]

It appears they were actually just hosting a web app and users were sending their decryption password to Hushmail. I don't see a reference to backdooring the Java client, though obviously since they delivered it, they could do that too. https://www.wired.com/2007/11/encrypted-e-mai/

[bigiain → digianarchist]

I remember when Lavabit didn't...