4 ms·
That's not true at all? Their selling point is also that they have end-to-end encryption that they can't breach - so your emails can't be grabbed by a governmen
by geewee 5y ago
That's not true at all? Their selling point is also that they have end-to-end encryption that they can't breach - so your emails can't be grabbed by a government actor.
- ezoe 5y agoI know nothing about this case. But it seems to me, the content of the mails are successfully protected by the encryption. The authority seized the IP addresses of the user of that mail address by ordering the ProtonMail to implement the IP logging.
- southerntofu 5y ago> Their selling point is also that they have end-to-end encryption that they can't breach They technically could, by serving you malicious JavaScript. And they have proven that they are willing to do that in order to get cozy with law enforcement, even for a very obvious case of unfair political repression.
- geewee 5y agoThat's a fair statement - I think it then comes down to: Can you by law in Switzerland order someone to serve malicious JavaScript, or only to e.g. deliver information you already have?
- southerntofu 5y agoIn the present case, ProtonMail was compelled to backdoor its system to log an IP it did not log previously, so it's arguably closer to the former situation you presented.
- protonmail 5y agoNo, this is not permitted in Switzerland.
- southerntofu 5y agoThanks for the clarification, and for making your homepage much more honest in regards to your privacy policy. May i ask what's the difference in regards to the law between being compelled to modify your systems to record an IP address (which i heard was the fact in this case) and to backdoor OpenPGPJS? From my technical perspective it sounds exactly the same, but i'm unfamiliar with swiss law.