I don't think the current hate for ProtonMail is justified. Like I point out about Signal, it's a privacy messenger not an anonymity messenger (in reference to

I don't think the current hate for ProtonMail is justified. Like I point out about Signal, it's a privacy messenger not an anonymity messenger (in reference to the phone numbers). That said, the web-generated encryption keys in ProtonMail are an interesting exercise. You have the choice of having a password for both logon and the mailbox or a unique password for both. You also have the ability to generate keys on your computer and upload them to the system. The combined web-generated password key is the default. I noticed that there is likely an implied third password key when using combined web because you have the ability to change the combined logon/mailbox password key and with email addresses from more than 1 domain sharing the same inbox I observed that changing the combined key for all the domains sharing the inbox continued to allow previously sent email within the system to be readable instead of unreadable, which implies the system has its own non-visible key. I didn't test this with separate keys for mailbox vs logon and didn't test with PC-generated keys, because to be honest, I didn't really care that much and it's a cloud-based system on the web and it's trivial to write code to label something unreadable when it actually isn't so my observation is an oversight. It's an unrealistic expectation to expect complete anonymity and privacy both. You have to trust that whatever it is, is good enough and that's all. They're a great service for what they offer, a less hassle, more private email service.