3 ms·
you'd probably be looking for protonmail if your only criteria is jurisdiction. They seem competent enough from the outside - I have no insight into how they o
by brongondwana 11y ago
you'd probably be looking for protonmail if your only criteria is jurisdiction. They seem competent enough from the outside - I have no insight into how they operate.
We (FastMail) have a far superior product in just about every other way though, so it comes down to what you consider important, and what tradeoffs you're willing to make.
In my opinion there is a very tiny gap between things for which a security agency is willing to take the PR hit of taking our servers out of the datacentre in New York (and dealing with the fact that the disks are encrypted and there are replicas in Amsterdam of all the data anyway) - and where they're willing to bribe/coerce a staff member or datacentre tech in Switzerland (or just quietly do a backroom deal with the government there). You would have to, as robn said - be doing some pretty shady stuff - stuff that's probably against our terms of service anyway - stuff that's probably going to get a lawful intercept done in any country. Speaking of which, Switzerland does lawful intercept too, and don't think that any service there will magically be immune from legal process. https://www.li.admin.ch/en/themes/procedure https://www.li.admin.ch/en/themes/procedure
tl;dr - we don't place ourselves above the law. We obey the laws of Australia, which has strong privacy protections still - despite this silly metadata retention business (which is totally knee jerk and poorly written and, our legal advice suggests, not relevant to us anyway). It's mostly so a handful agencies (actually fewer than before, it tightened that up) can get their hands on mobile phone tower records faster and with guaranteed timeframes of retention - local ISP email just got caught in the crossfire.
- dombili 11y ago>you'd probably be looking for protonmail if your only criteria is jurisdiction. They seem competent enough from the outside - I have no insight into how they operate. http://www.wired.com/2015/10/mr-robot-uses-protonmail-still-isnt-fully-secure/ http://www.wired.com/2015/10/mr-robot-uses-protonmail-still-...
- brongondwana 11y agoYep, that's pretty much in agreement with what I said - the technical dance that they go through adds extra protections against one specific type of attack (a legal "hand over data" that doesn't come with a "change your system so you can obtain said data" rider), but it's still worthless in face of other attack vectors.