4 ms·

Protonmail is perfectly safe (for now) as long as you use it through Tor (https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/ https://proton

Protonmail is perfectly safe (for now) as long as you use it through Tor (https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/ https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7...) or a VPN so they don't log your IP and don't provide real recovery information.

super256 3y ago
Have you tried registering an account on proton via Tor? I get a prompt to verify my phone number or give them a recovery mail (trash mailers are blocked) 99% of the time.
- zhfliz 3y ago
  it might have changed recently but i have previously created accounts by providing trash mailer addresses during creation.
bharathyes 3y ago
do they not verify the recovery email before account activation? how do you not provide a real recovery mail?
- m00dy 3y ago
  you can get around by using disposible mail services.
  - flotzam 3y ago
    No, those are generally blacklisted by Proton.
- WithinReason 3y ago
  You can remove the recovery info after registration.
- pepa65 3y ago
  Get a free domainname, set up a mail server and receive your confirmation email. Then switch to a recovery phrase, get rid of the whole domainname.
m00dy 3y ago
so, the question is here how safe tor is.
josephg 3y ago
Its only safe if you're only talking to other people who also use protonmail. (Ideally also through tor.). As soon as your email thread includes people on gmail, the government can just ask them for the email thread. And if you're restricting your conversation to people on protonmail for security, why bother with email at all? Seems easier to just put the conversation on signal anyway. And then you get all of signal's other security benefits, like E2E encryption, crypto ratcheting, disappearing messages and so on.
flotzam 3y ago
It is not possible to sign up over Tor (neither through their .onion nor through proton.me) without providing a non-disposable verification email address or a non-cryptocurrency payment method. This second restriction is especially damning: They accept cryptocurrency, but only for existing accounts - after you've already doxxed yourself.

super256 3y ago

Have you tried registering an account on proton via Tor? I get a prompt to verify my phone number or give them a recovery mail (trash mailers are blocked) 99% of the time.

zhfliz 3y ago
it might have changed recently but i have previously created accounts by providing trash mailer addresses during creation.

bharathyes 3y ago

do they not verify the recovery email before account activation? how do you not provide a real recovery mail?

m00dy 3y ago
you can get around by using disposible mail services.
- flotzam 3y ago
  No, those are generally blacklisted by Proton.
WithinReason 3y ago
You can remove the recovery info after registration.
pepa65 3y ago
Get a free domainname, set up a mail server and receive your confirmation email. Then switch to a recovery phrase, get rid of the whole domainname.

m00dy 3y ago

so, the question is here how safe tor is.

josephg 3y ago

Its only safe if you're only talking to other people who also use protonmail. (Ideally also through tor.). As soon as your email thread includes people on gmail, the government can just ask them for the email thread. And if you're restricting your conversation to people on protonmail for security, why bother with email at all? Seems easier to just put the conversation on signal anyway. And then you get all of signal's other security benefits, like E2E encryption, crypto ratcheting, disappearing messages and so on.

flotzam 3y ago

It is not possible to sign up over Tor (neither through their .onion nor through proton.me) without providing a non-disposable verification email address or a non-cryptocurrency payment method. This second restriction is especially damning: They accept cryptocurrency, but only for existing accounts - after you've already doxxed yourself.