4 ms·
It's good to be cautious, but this is sort of a silly test. Protonmail doesn't have to "log" messages; they have them already. If I were Protonmail and I had t
by md_ 5y ago
It's good to be cautious, but this is sort of a silly test.
Protonmail doesn't have to "log" messages; they have them already. If I were Protonmail and I had to comply with lawful intercept requirements, I'd just:
a) make sure that message content isn't deleted from the mailbox when the user thinks it is
b) make sure I retain access to server-managed PGP keys (by logging key material and user-supplied passphrases)
But I sure as hell would not call some Java logger.trace() on every goddamn email! That's totally nonscalable and just silly.