Op-ed: Lavabit's primary security claim wasn't actually true
Moxie Marlinspike is a cryptographer, software developer and security researcher who regularly appears at the Black Hat security conferences. His critique of HTTPS Web encryption has led browser makers to change the way they implement it.
Context & Ripple Effects
Lavabit entered November 2013 as the emblem of principled resistance: the encrypted email provider went dark in August — what Mega's CEO called 'privacy seppuku' — and its owner formally appealed the secret surveillance order behind the shutdown, with case details immediately sealed. Into that sympathetic vacuum steps Moxie Marlinspike, no anonymous critic: he demonstrated a third hole in SSL encryption back in 2009 and his HTTPS critiques have already forced browser makers to change their implementations.
The op-ed lands the same week the story fragments across at least eight outlets — TechCrunch, PC World, The Register, VentureBeat, Engadget among them — with TechCrunch framing it against the Lavabit founder's Kickstarter to open-source a new end-to-end encryption protocol. That timing is the point: the credibility of provider-operated encryption claims now directly bears on a live fundraising pitch for the successor.
First-order effects
- The critique reframes the shutdown narrative: a service lionized for resisting a surveillance order is now argued by a credible cryptographer not to have delivered the protection its users believed they were paying for, complicating the goodwill surrounding the sealed-order appeal.
- The Lavabit founder's Kickstarter for an open-source end-to-end protocol now has to survive scrutiny of exactly the kind of server-side trust claim the op-ed dismantles — assertions alone won't carry the pitch.
Second-order effects
- Every rival secure email and messaging provider inherits the burden: once a flagship service's equivalent claim is publicly challenged, competitors must open their code or document their key handling, because 'trust our servers' becomes a marketing liability.
- Open-source publication shifts from a transparency gesture to table stakes for privacy products seeking post-Snowden adoption, advantaging projects that ship auditable crypto over those that ask users to take the operator's word.
Third-order effects
- If the pattern holds, encrypted communications consolidate around architectures where the operator structurally cannot read traffic no matter what a court compels — which would move fights like Lavabit's appeal from questions about technical capability to purely legal ones.
- Independent cryptographers harden into a de facto gatekeeping layer between privacy vendors and their users, formalizing the audit role Marlinspike has played since his Black Hat-era work reshaped how browsers implement HTTPS.
The trend: Post-Snowden, private communications are migrating from provider-held keys toward end-to-end designs, with independent cryptographers arbitrating whether vendor security claims survive contact with surveillance law.