3 ms·
I feel like it's not true that their services are end-to-end encrypted. I mean, they are, but they have the encryption keys so it's the same as if they are not.
by Mystery-Machine 3y ago
I feel like it's not true that their services are end-to-end encrypted. I mean, they are, but they have the encryption keys so it's the same as if they are not.
https://news.ycombinator.com/item?id=29103056 https://news.ycombinator.com/item?id=29103056
https://encryp.ch/blog/disturbing-facts-about-protonmail/ https://encryp.ch/blog/disturbing-facts-about-protonmail/
https://news.ycombinator.com/item?id=17775326 https://news.ycombinator.com/item?id=17775326
https://news.ycombinator.com/item?id=28057433 https://news.ycombinator.com/item?id=28057433
- jacooper 3y agoThe encryption keys are encrypted using your password. Its the same as your phone.
- protonmail 3y agoExactly. Your encryption key is stored encrypted so that we have no access to it. It is decrypted when you enter your password. We don't have access to your password, only an encrypted hash of it, so that our systems can recognize it. We cannot derive your password back from the hash.
- protonmail 3y agoIt's open source so the E2EE can be (and has been) independently verified. The crazy CIA/NSA conspiracy theories are also quite easily debunked, see here: https://www.reddit.com/r/ProtonMail/comments/14demhj/debunking_proton_and_ciansa_fake_news/ https://www.reddit.com/r/ProtonMail/comments/14demhj/debunki...