CNET | News | Hardware | Downloads | Special Reports | Games | Software | Lowest Prices Free Email   
   CNET Auctions  Bid and win online! Desktops, Software, Monitors...
Advanced • Tips 
Click here for Microsoft Office 2000
Click here for Microsoft Office 2000

   CNET : News : The Net : Story

Sign up now!
Sign up now!

  CNET Topic Center

  Latest headlines
display on desktop

Enterprise Computing
Informix settles shareholder suits

Rulings may have Sun on the run

Motorola shifts workers from Teledesic

Intel molds chip mindset for Web thrust

The Net
Yahoo lets parents restrict children online

Latin American ISP jumps after IPO

Edgar Online's trading debut unremarkable

Messaging firm files for IPO

Morgan Stanley analyst down on Net stocks

SportsLine scores Major League Baseball

Juno Online Services falls on trading debut

Market rebounds, led by IBM

Net fraud rampant with lax global laws

Net learning resource expands

Personal Technology
HP, UPS team on document delivery

PC revenue: As good as it gets?

Net firm to launch PC security software

DLJDirect shares up on first trading day

Entrust targets VeriSign on certs

Onslaught of IPOs crashes Wit site

Services and Consulting
No new articles.

Did you miss a day?
> One Week View

  News Options
One Week View 
Send us your tips 
Desktop News 
News Alerts 
Advanced Search 

 A D V E R T I S E M E N T
  Special Offers
 from our sponsors

  FREE Newsletter sample > 


Front door | Enterprise Computing | E-Commerce | Communications | The Net | Personal Technology | Services and Consulting | Year 2000 | CNET Investor | CNET Radio | Perspectives | Rumor Mill | One Week View

Category The Net
Firm unveils encrypted free email
By Paul Festa
Staff Writer, CNET
May 20, 1999, 3:45 p.m. PT

Web-based email, long the tool of users who want free, easily accessible email service, has a new player that lets users send and receive encrypted messages.

Hush Communications today announced the debut of HushMail, a Web-based email service that uses a Java applet to encrypt and decrypt messages on senders' and recipients' computers. Users can only send encrypted messages to other HushMail accounts.

The 1,024-bit encrypted messages cannot be read by anyone else, according to the company. Users also can set up anonymous accounts.

The new product could raise the ire of law enforcement officials, who worry that email with strong cryptography--not to mention cryptography that is free and widely available--could further limit law enforcement's options in communications surveillance.

"It doesn't sound like it's illegal, but is it a law-enforcement problem? Sure it is," said FBI spokesman Frank Scafidi.

 Do you want to know more? 
  • Read related news
  • View story in The Big Picture
  • Go to Message Boards
  • Search
    Email this story to a friend
    Click for printer-friendly format

    HushCom USA launched the site with the promise of providing privacy for email senders on the Web. Email encryption is currently available, most famously in the form of Network Associates' Pretty Good Privacy product. But the complication of exchanging encryption keys, the expense of encryption products, and the complication of negotiating U.S. export law for strong cryptography have kept current privacy solutions from mainstream adoption.

    HushMail has automated the process, offered it for free, and found a legal way to offer strong encryption.

    HushMail launches as free email providers and other Web communication tools are becoming more frequent targets of law enforcement and lawyers seeking information on behalf of their clients. HushMail does not have a plan in place were it to be served with a subpoena, according to HushCom board member and investor Jon Gilliam.

    "We are providing the encryption, and anything people send is between them," said Gilliam, who is also president of Austin technical recruiting firm the Adderley Group. "We'll have to deal with that issue when we come to it. We do have logs of messages, but we are not able to read them. [A law enforcement subpoena] would be a hairy issue, and we have not considered it yet."

    Is it legal?
    Encryption lawyers suggest that HushMail would be on solid legal ground in the face of a subpoena.

    "If they really don't have the data, they can't give up what they don't got," said Michael Froomkin, law professor at the University of Miami. "That's a pretty good defense."

    HushMail has avoided a separate legal hurdle, which is that the United States prohibits the export of encryption tools as strong as what the company offers. That law does not apply to HushCom, which is based in Anguilla, British West Indies.

    "Anguilla is under U.K. protection--it's autonomous and free of encryption laws," said Gilliam. "It's also a tax haven, which is nice."

    The White House's crypto policy has been under fire by lawmakers and federal courts. The government regulates encryption, citing national security concerns. The Ninth Circuit Court of Appeals earlier this month ruled that the policy violates the First Amendment rights of a math professor who wanted to post crypto code on his Web sites on grounds that source code is a language that enjoys free speech protection. The Justice Department is expected to appeal that ruling.

    However, the ruling does not apply to off-the-shelf products such as HushMail.

    HushMail is not the only cryptography firm based in Anguilla. Strong-cryptography firm C2Net also is incorporated there. The company's international intellectual property rights are developed in the United Kingdom and held there because the chances of the law changing in Anguilla are "minimal," according to C2Net chief executive Bill Rowzee.

    HushMail is not the first Web email site offering encryption. German language portal offers similar functionality at its FreeMail site.

    Cryptography experts said HushMail could wind up popularizing encrypted email.

    "Hopefully this means there will be more encrypted email, that I can get an encrypted email account that would work end to end," said Bruce Schneier, a cryptography consultant with Counterpane Systems. "It seems like a really good idea. One of the big problems with email security is that you have to buy something or download something."

    For now HushMail is advertising-supported. But HushCom is eyeing an acquisition exit strategy even in its inaugural week.

    "We're pretty sure this technology is something the very big players would like to have," said Gilliam. "We feel that it's going to be a pretty priceless company to have, and the big boys are going to want to take a look at it."

    Gilliam specifically mentioned Microsoft, which acquired Hotmail; Yahoo, which acquired Rocketmail and maintains Yahoo Mail; and Network Associates.

    HushMail is not yet available for the Macintosh platform.

    Related news stories
    New Communicator promotes Digital City May 18, 1999
    • Math professor wins landmark crypto ruling May 6, 1999
    • Calendars key to portals' progress April 30, 1999
    • Free emailer files for IPO April 6, 1999
    • Application takes aim at free email services March 3, 1999

    Front door | Enterprise Computing | E-Commerce | Communications | The Net | Personal Technology | Services and Consulting | Year 2000 | CNET Investor | CNET Radio | Perspectives | Rumor Mill | One Week View
    Click here for Microsoft Office 2000
    Click here for Microsoft Office 2000

    Contact us | Member services | Help

    CNET Services: Stock Quotes Auctions Tech News Free Downloads Search Games Latest Products Find a New PC Lowest Prices Cool Toys Web Building Help Tech Jobs Free Email

    Free Newsletter!
       Subscribe | How to advertise | Corrections | CNET Jobs | CNET Support | Message Boards    About CNET  
    Back to Top 

    Copyright © 1995-99 CNET, Inc. All rights reserved. Privacy policy.