4 ms·

Source? They've always been logless. I think you have this completely backwards considering Proton maliciously logged and handed out customer IPs to police [0]

Source? They've always been logless. I think you have this completely backwards considering Proton maliciously logged and handed out customer IPs to police [0]. [0]: https://techcrunch.com/2021/09/06/protonmail-logged-ip-address-of-french-activist-after-order-by-swiss-authorities/ https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre...

hu3 3y ago
And how does Mullvad deals with court orders? I guess it's handled by this finding in the audit: “VPN servers accept remote logins from administrators, who technically have the ability to tap into production users' VPN traffic”
- _joel 3y ago
  If your treat assessment involves this, you're probably best not using a $5 a month VPN.
- karaterobot 3y ago
  Here you go: https://mullvad.net/en/blog/2023/4/20/mullvad-vpn-was-subject-to-a-search-warrant-customer-data-not-compromised/ https://mullvad.net/en/blog/2023/4/20/mullvad-vpn-was-subjec... In short, they immediately and helpfully complied with police... by letting them know they did not store any data about customers whatsoever.
flangola7 3y ago
>maliciously They literally had no choice, it was a court order.
stOneskull 3y ago
“The Swiss legal system, while not perfect, does provide a number of checks and balances, and it’s worth noting that even in this case, approval from three authorities in two countries was required, and that’s a fairly high bar which prevents most (but not all) abuse of the system.”
protonmail 3y ago
As any other company operating legally, we have to respect the local legislation, which is what happened in this case. The case also shows that our encryption works as intended - we were not able to share any of the user's data stored encrypted on our servers (email content, attachments, etc.), because we don't have access to it ourselves. Note also, that the case pertains to Proton Mail, and not Proton VPN. Proton Mail is considered to be a communication service, and in most countries (including Switzerland), communication services are regulated to some extent. The treatment of VPNs is different. There are no Swiss laws compelling us to log IP addresses, personal identifiers, traffic or browsing history, as proven in a 2019 legal case (we were not able to provide the requested information because we don't keep any: https://protonvpn.com/blog/transparency-report/ https://protonvpn.com/blog/transparency-report/).
- pelasaco 3y ago
  thank you Protonmail. I was downvoted as expected, but you still the only viable option <3.

hu3 3y ago

And how does Mullvad deals with court orders? I guess it's handled by this finding in the audit: “VPN servers accept remote logins from administrators, who technically have the ability to tap into production users' VPN traffic”

_joel 3y ago
If your treat assessment involves this, you're probably best not using a $5 a month VPN.
karaterobot 3y ago
Here you go: https://mullvad.net/en/blog/2023/4/20/mullvad-vpn-was-subject-to-a-search-warrant-customer-data-not-compromised/ https://mullvad.net/en/blog/2023/4/20/mullvad-vpn-was-subjec... In short, they immediately and helpfully complied with police... by letting them know they did not store any data about customers whatsoever.

flangola7 3y ago

>maliciously They literally had no choice, it was a court order.

stOneskull 3y ago

“The Swiss legal system, while not perfect, does provide a number of checks and balances, and it’s worth noting that even in this case, approval from three authorities in two countries was required, and that’s a fairly high bar which prevents most (but not all) abuse of the system.”

protonmail 3y ago

As any other company operating legally, we have to respect the local legislation, which is what happened in this case. The case also shows that our encryption works as intended - we were not able to share any of the user's data stored encrypted on our servers (email content, attachments, etc.), because we don't have access to it ourselves. Note also, that the case pertains to Proton Mail, and not Proton VPN. Proton Mail is considered to be a communication service, and in most countries (including Switzerland), communication services are regulated to some extent. The treatment of VPNs is different. There are no Swiss laws compelling us to log IP addresses, personal identifiers, traffic or browsing history, as proven in a 2019 legal case (we were not able to provide the requested information because we don't keep any: https://protonvpn.com/blog/transparency-report/ https://protonvpn.com/blog/transparency-report/).

pelasaco 3y ago
thank you Protonmail. I was downvoted as expected, but you still the only viable option <3.