3 ms·
> We should switch to Protonmail or similar webmail Doesn't Protonmail decrypt at the server? That is, can't Protonmail read your encrypted messages? And don't
by denton-scratch 3y ago
> We should switch to Protonmail or similar webmail
Doesn't Protonmail decrypt at the server? That is, can't Protonmail read your encrypted messages? And don't they have form for grassing people up?
I'm not sure about those two claims. But that's the point - it's difficult for even a techie to use crypto(graphy) safely. If you want to use it as an impediment to snoopers, or as some kind of statement, cool. But if you let the server decrypt your messages, you aren't really safe.
Signal disloses your phone number.
I think I understand the limitations of PGP/GPG; I'd use that, if my correspondents had ever heard of it (and if I were sure that they weren't going to forward/reply-to my messages in plain, or store the plaintext on some Google server). But at the moment, the state of end-user encrypted messaging software doesn't look very safe to me. What I would like to see is an end-to-end scheme that can't be used unsafely, even if the user is an idiot, and that is used more-or-less universally.
Otherwise I'm reluctant to SHOUT my secrets over the internet.
- iggldiggl 3y ago> Doesn't Protonmail decrypt at the server? That is, can't Protonmail read your encrypted messages? It doesn't decrypt them server-side, but since they're the ones serving you up with the webmail interface, you still need to trust them that the webmail code doesn't do anything nasty it shouldn't actually do.