3 ms·
This case in fact proves that we provide privacy by default, as it shows that no legal request can bypass Proton's encryption. The email content stored encrypte
by protonmail 3y ago
This case in fact proves that we provide privacy by default, as it shows that no legal request can bypass Proton's encryption. The email content stored encrypted on our servers remains inaccessible to us due to zero-access architecture we use (https://proton.me/blog/zero-access-encryption https://proton.me/blog/zero-access-encryption), and therefore, we are not able to share it with any third-parties (including law enforcement) in an unencrypted form.
- hammyhavoc 3y agoAddress the point raised. The encryption of emails has nothing to do with handing over an IP address.
- protonmail 3y agoIt's been addressed multiple times (e.g. here: https://proton.me/blog/climate-activist-arrest https://proton.me/blog/climate-activist-arrest). The IP address in question was a signup address, which we need to keep temporarily in order to keep the services working properly and prevent abuse. As any other legally operating company, we need to comply with the local legislation, and we've been transparent about it: https://proton.me/legal/transparency https://proton.me/legal/transparency. If anonymity is part of your threat model, we recommend using a no-logs VPN service or Tor to hide your actual IP address: https://proton.me/blog/use-protonmail-anonymously https://proton.me/blog/use-protonmail-anonymously.
- hammyhavoc 3y agoYou're making my case here that services operated by businesses cannot deliver what's expected in the threat model for a lot of folks. You're also assuming I have a threat model that includes IP addresses as a consideration of it. I'm merely pointing out running an above-board business and genuinely taking care of privacy are two very different things. It comes across as theatre. What's your moral standing on what happened, if any?