Unnecessary and deeply concerning bow to the new “king”

Update: position got backed up by an official Proton post on Mastodon, it’s an official Proton statement now. https://mastodon.social/@protonprivacy/113833073219145503

Update 2, plot-twist: they removed this response from Mastodon - seems they realize it exploded into their face!

  • FolknForage@lemm.eeEnglish
    17·
    1 day ago

    I am not a security expert, but I remember reading Proton is not really secure?

    Edit: expanded in comment below. I think what I remember is “Proton is not really any more “secure” than other email providers.”

    • sudoer777@lemmy.ml
      2·
      2 days ago

      It’s not E2E encrypted unless you’re using PGP or emailing another Proton user, which is basically nobody for most people. They do encrypt your email when it arrives in a way that is supposed to make them inaccessible to them (which is more than what most email providers do), so you’d need to trust that they’re not intercepting your emails and storing them somewhere unencrypted. Stuff like SimpleX/Cwtch/Signal is E2E encrypted though by default so their security is a lot better

      • FolknForage@lemm.eeEnglish
        1·
        1 day ago

        That all makes sense.

        I did some digging to see what was that I had read, and I think it was a case a few years back of Proton complying with a Swiss subpoena requested by US, investigating death threats to Fauci. Proton disclosed (limited) information about the account that sent those emails.

        I think because Proton promised complete privacy, and did provide user information, it ended in my brain as “Proton is not as private as they tout it to be”.

        I am not advocating for protections of highly illegal acts, but since:

        1. PGP encryption is only good if both ends use keys, and
        2. Proton complies with Swiss law requests

        I stored Proton in my “Marketing bullshit” cabinet and never opened an account. Other than not selling my info to advertisers, it seems the same as Apple email, for example.

    • zqps@sh.itjust.works
      4·
      2 days ago

      In what way?

      Asolute security doesn’t exist, it’s always a trade-off with cost, time investment, and convenience.

      • FolknForage@lemm.eeEnglish
        1·
        1 day ago

        Thank you.

        I think I remember it was when Proton complied with Swiss subpoena and provided user account info requested by US. I clarified my nebulous comment in another thread here.

    • Pup Biru@aussie.zoneEnglish
      2·
      2 days ago

      email is not secure. proton is among the most reasonably secure compromises; there’s very little they could do to become more secure