I got a message from Lively which they sent through Hubri. It had a big block of stuff that sort of looks like PGP:

--- START PROTECTED MESSAGE TDF 0 ---
PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9InllcyI/Pgo8dGRmOlRydXN0ZWREYXRhT2JqZWN0IHhtbG5zOnRkZj0idXJuOnZpcnRydTp0
 ...
TnJUMFRSZEZ3PTwvdGRmOkJhc2U2NEJpbmFyeVBheWxvYWQ+CjwvdGRmOlRydXN0ZWREYXRhT2JqZWN0Pg==
--- END PROTECTED MESSAGE ---

It had a link to the Hubri web site, which told me that it was loading their special decoder, then asked whether my address was the one it had sent the message to (uh, yes), and it said OK, we'll send you a secret code.

The code arrived at the same address as the original message, and when I cut and pasted it into their web page, it showed me the message. What exactly is their security model? Anyone who could interecept the original message could intercept the followup with the code, so how is this different from sending plain text?

The Hubri page offered me the opportunity to send Lively an equally secure response, which I did. It said to look at the messages on their web site to see my answer. You'd expect the message they sent via Hubri also to be in their internal messaging, but no such luck.