Hushmail not as secure as it may seem

Nov 16, 2007 19:21 GMT  ·  By

A web-based encrypted email provider was required to offer no less than 12 CDs containing information about three registered members, Ryan Singel of Wired wrote today. Hushmail, one of the numerous email services on the web, aims to lure consumers by offering encryption features and numerous other security functions which can protect their content of unauthorized access. Apparently, Hushmail is not as safe as it may seem, because a September court order demands 12 CDs of private information about three investigated users. "The charging document alleges that many Chinese wholesale steroid chemical providers, underground laboratories and steroid retailers do business over Hushmail", the article published on Wired reads.

Hushmail has servers in multiple countries, a move especially meant to protect the users from court requirements according to the product's FAQ. "Hush Communications maintains its servers in British Columbia, Canada. Hush Communications complies fully with valid court orders issued by the courts of British Columbia, Canada. In order to ensure consistent treatment of all users, Hush Communications does not accept court orders from other jurisdictions. However, law enforcement agencies from other jurisdictions may pursue action through international channels compliant with the laws of British Columbia and Canada, resulting in a court order being issued by a court of British Columbia", it is mentioned in the FAQ.

Sure, accessing users' content might sound pretty unfair, but since it's a part of a legal investigation, the companies can't do anything about it. Think at YouTube, Google's video sharing technology which was involved into a similar legal trouble. Some time ago, following a court order, YouTube was demanded to provide details about a registered member who uploaded pirated copies of a Fox movie even before it was officially released in the United States. YouTube offered the details which helped the investigators identify and prosecute him.