E-mail's Big Privacy Problem: Q&A With Silent Circle Co-Founder Phil Zimmermann
Customers of Silent Circle's encrypted mail service got an unfortunate surprise on Friday: all their messages had been deleted. — The management of Silent Circle, an encryption firm that specializes …
Context & Ripple Effects
Silent Circle, an encryption firm co-founded by PGP pioneer Phil Zimmermann, wiped every message off its encrypted email service on Friday, giving customers no warning that their archives were gone. The move traveled unusually far for a single vendor decision: Forbes was joined on the same story by Ars Technica, Motherboard, Techdirt, eWeek, SecurityWeek, DSLreports and others within a day.
The striking part is the direction of the failure — not a breach or a subpoena, but a privacy company destroying its own customers' data on purpose. In the accompanying Q&A, Zimmermann frames it as e-mail's structural problem: an architecture that stores messages on servers creates exactly the exposure an encryption firm exists to prevent, so the only clean fix was to make the archive cease to exist.
First-order effects
- Silent Mail customers lost their entire message history at once — the people who paid specifically for protected storage are the ones whose data was destroyed, with no migration path offered in the announcement.
Second-order effects
- Every rival running a hosted encrypted-email service now inherits the burden of explaining why its servers will not face the same choice, and customers of any such service must price in the risk that a provider will unilaterally delete the product rather than defend the data.
Third-order effects
- If the pattern holds, the episode pushes secure-communications vendors away from store-and-forward email entirely, toward channel designs where nothing persists on a server to be breached, seized, or surrendered — turning 'we hold your messages' into a liability claim no privacy brand wants to carry.
The trend: Encryption companies are treating e-mail's store-and-forward architecture as unfixable for privacy, accelerating the shift toward real-time secure channels that leave no central archive.