8 ms·
That's why we published a threat model that goes over what Proton Mail can and cannot protect against: https://proton.me/blog/protonmail-threat-model https://pr
by protonmail 3y ago
That's why we published a threat model that goes over what Proton Mail can and cannot protect against: https://proton.me/blog/protonmail-threat-model https://proton.me/blog/protonmail-threat-model.
- hammyhavoc 3y agoIt's hard to take it seriously when you invoke an XKCD comic in threat model documentation. It isn't cute. Anybody receiving sensitive information via email is doing email wrong. Email in and of itself is not fit for purpose as anything but a means of notification that something needs their attention on x, hence banks tell you to login to read a sensitive notification, hence the government tell you to login to the web portal to read a message.
- red-iron-pine 3y agoThey have a link, mostly near the bottom of the report, as a way of (politely) saying that their service won't protect you from "rubber hose cryptanalysis". It's a cheeky way of saying "this won't stop people from torturing shit out of you", and the rest of the article looks fine. It's hard to take a poster seriously when they dismiss the entire model based on a hyperlink who fails to address the points in the model. I'll agree with your point about email though: it's a tool for correspondence, not for secure transfer of sensitive info.