I asked ProtonMail about this article. Response: We have read the article that you linked carefully and we have to say that what they claim is truth is based o

I asked ProtonMail about this article. Response: We have read the article that you linked carefully and we have to say that what they claim is truth is based on bunch of assumptions and mis-interpretations. We will try to comment on the accusations in the same order as they are presented on the web page. 1. ProtonMail offers the users to log into their account through our Onion site due to privacy reasons. Some users simply prefer to use TOR and we allow them to access their accounts through our Onion site. The fact that we have an onion site does not automatically mean that we are linked to CIA. We are not related to CIA in any way, nor we have any backdoors that would allow anyone to access anyone's messages. We also do not allow sign-ups from the Onion page as part of our anti-abuse measures. 2. The claim that we do not use end-to-end encryption is a lie, and in fact, the author of the article that you linked has also linked our explanation on this topic. https://protonmail.com/blog/cryptographic-architecture-response/ https://protonmail.com/blog/cryptographic-architecture-respo... ProtonMail uses zero-access encryption to store the user's messages on our servers and we certainly use end-to-end encryption. https://protonmail.com/support/knowledge-base/what-is-encrypted/ https://protonmail.com/support/knowledge-base/what-is-encryp... https://protonmail.com/blog/zero-access-encryption/ https://protonmail.com/blog/zero-access-encryption/ 3 and 4: Proton Technologies is majority owned by employees of the company, and is solely under Swiss jurisdiction. Information about the company and our directors are in public record, and can be found in the Swiss commercial register: http://ge.ch/hrcintapp/externalCompanyReport.action?companyOfrcId13=CH-660-1995014-1&ofrcLanguage=4 http://ge.ch/hrcintapp/externalCompanyReport.action?companyO... Regarding VMS, VMS is not an investment fund or investor. It's part of MIT (http://vms.mit.edu http://vms.mit.edu), which is an university in Cambridge, Massachusetts. As a company heavily focused on cryptography research, we do share research with many of the world's top research institutions, including CERN, MIT, ETH Zurich, and several other research institutes. This is actually a benefit as it ensures that our technology is thoroughly checked by others to be certain it is secure. 5. The present employer of people that used to work for us in the past does not mean anything. 6. If someone uses EML files, that cannot mean that they are automatically related to CIA. EML is a file extension that is used for an e-mail message saved to a file. EML files are widely adopted. 7. This is not correct, because we do not have access to our user's messages, nor the means to decrypt them. https://protonmail.com/blog/zero-access-encryption/ https://protonmail.com/blog/zero-access-encryption/ 8. We have used Radware in the past for DDOS protection, but they never had any access to any data. https://protonmail.com/blog/a-brief-update-regarding-ongoing-ddos-incidents/ https://protonmail.com/blog/a-brief-update-regarding-ongoing... https://protonmail.com/support/knowledge-base/email-ddos-protection/ https://protonmail.com/support/knowledge-base/email-ddos-pro... 9. This is not true and we don't see how this claim is a security concern of any kind. 10. We are unable to comment on this. 11. See points 3 and 4 Also, you are welcome to review our terms and conditions, privacy policy and transparency reports. https://protonmail.com/terms-and-conditions https://protonmail.com/terms-and-conditions https://protonmail.com/blog/transparency-report/ https://protonmail.com/blog/transparency-report/ https://protonmail.com/privacy-policy https://protonmail.com/privacy-policy Have a nice day