[absherwin]

While many misinterpret the the facts, there's a kernel of truth in those discussions that you gloss over.

GMail is not secure against the NSA or even a state judge's warrant. That has numerous advantages for society but regardless it's not and never will be secure against government orders. That's never been its design. Levinson's service was secure against them for certain clients.

The reason the anti-NSA crowd is intrigued by him is the same reason sources told their secrets to Bob Woodward. He proved willing to protect Deep Throat's identity despite immense effort to out it. Similarly Levinson was willing to risk his business and contempt proceedings to protect Snowden.

[tptacek]

Am I reading this comment correctly? Is this a comment that argues that Lavabit, which "encrypted" mails serverside and didn't even have forward secrecy enabled in its TLS configuration, was more secure than Google Mail?

[absherwin]

I'd assume not since your reply misses the point.

The government's wiretap order and the subsequent contempt proceedings suggests that despite the technical problems of Lavabit, the government did not get the data they sought. Had Snowden used GMail, do you believe the government would have received the information they sought?

This isn't security in the sense you'd use it in an audit. It's just a design decision. In the vernacular, designs that permit the release of private information are sometimes called insecure.

[mpyne]

Lavabit was just as susceptible to a state warrant though. That's why Levison had to shut it down (despite having no objection with complying with other warrants previously).