4 ms·
They necessarily know the e-mail body when the (unencrypted) e-mail first comes in.
by Tijdreiziger 3y ago
They necessarily know the e-mail body when the (unencrypted) e-mail first comes in.
- Ancapistani 3y agoThis applies only to emails sent from an external provider. Proton’s “secure email” functionality is limited to Proton addresses.
- Tijdreiziger 3y agoEven when you send a Proton-to-Proton e-mail, Proton’s e-mail client is encrypting that e-mail, so you still have to trust them.
- protonmail 3y agoNote that our cryptography is open-source and independently audited: https://openpgpjs.org/ https://openpgpjs.org/. The encryption keys are generated with your Proton account password, which we don't have access to, so we have no way to decrypt your content stored encrypted on our servers.
- deleted 3y ago[deleted]
- illiac786 3y agoYou are describing a problem without solution here. What is your preferred approach to this dilemma?
- Tijdreiziger 3y agoI’m just saying that you should be aware of it. Whether it’s a problem or not depends on your threat model, of course.
- protonmail 3y agoExactly, and even in the case when the emails are coming from a non-Proton service, the incoming emails are encrypted immediately after being checked for spam, phishing or malware: https://proton.me/support/proton-mail-encryption-explained https://proton.me/support/proton-mail-encryption-explained.