5 ms·
>If as soon as police show up (Which is almost the only case that people would want their IP hidden) they give IP logs, it is clearly false advertising Is ther
by COGlory 5y ago
>If as soon as police show up (Which is almost the only case that people would want their IP hidden) they give IP logs, it is clearly false advertising
Is there any evidence this is what happened?
An alternate scenario is that they were not keeping logs, and were then compelled by the authorities to start keeping them on that user.
- bdibs 5y agoWouldn't "any" include authority compelled logging?
- COGlory 5y agoPerhaps, but I'd imagine that semantically, "by default" negates that since this is clearly not a default situation.
- hh3k0 5y agoStop trying to defend indefensible behavior by getting hung up on semantics. I, for one, will not renew my ProtonMail account if that's their status quo.
- kazen44 5y agowhat other status quo do you expect from them? Having to provide IP logs after a warrant has been issued is the law in switserland (and most if not all of the EU). Sure, the law would (hopefully) be changed, but at the moment, this is the best they can legally do?
- ipaddr 5y agoTell users you are being logged on website. Put alert warning that account has logging enabled Change the service so collecting logs is not possible Stop adding captcha to tor users login because you want to identify users
- COGlory 5y ago>Tell users you are being logged on website. Frequently not legal >Put alert warning that account has logging enabled See above. Gag orders a problem with government in general. They do have a warrant canary page though, as well as a transparency report. https://protonmail.com/blog/transparency-report/ https://protonmail.com/blog/transparency-report/ >Change the service so collecting logs is not possible You mean stop serving HTTP and MX requests? >Stop adding captcha to tor users login because you want to identify users You mean let bots brute-force my password?
- COGlory 5y agoI'm extremely confused by this. Unless you are naive enough to assume that ProtonMail is incapable of logging IP addresses (in which case they'd be incapable of serving HTTP requests...see the problem?) then they can log. And they most certainly aren't going to declare independence from Switzerland and refuse to turn on IP logging when required to by law. Whereas with E2E-E, they actually are incapable of turning over readable emails.
- polote 5y agoThe end result is the same either way
- COGlory 5y agoNo, if they were not collecting logs by default, then it is clearly not false advertising.
- polote 5y agoSo the default is when nobody ask for the logs? What the point of not collecting IP unless for the time it is useful?
- Sebb767 5y agoNo history of when you logged in from where and, possibly, plausible deniability about about you being the only user of that account (through you'd probably need to prepare for this to be believable).
- Aachen 5y agoI mean it's either this or traffic analysis. If you use your clearnet IP address to do illegal things, it's nothing more than reasonable that you can get in trouble for it. This is also why I don't get protonmail in the first place. Unless you use pgp or equivalent, you'll always be subject to law enforcement. Just that protonmail cares more and caters more to activists and so might not give it out without checking that the asker is really legit and then give the minimal amount possible. But they'll always be able to turn over your emails and log IPs, it's not protonmail's fault the laws were voted into action like this.
- lelandfe 5y agoTechnically correct but misleading. They tout that off-by-default statement on their homepage, underneath the header of "Anonymous Email," with the closing sentence of "Your privacy comes first." So why even market that? It provides no meaningful security.