4 ms·
I see that they claim all of their apps and libraries are open source[0]. But they only link to the OpenPGP libraries they're using. Is this actually open sourc
by prophesi 2y ago
I see that they claim all of their apps and libraries are open source[0]. But they only link to the OpenPGP libraries they're using. Is this actually open source? Following the "Open Source" footer link[1], here they only link to the ProtonMail Github account with nothing mentioning ProtonDrive.
And if it is actually open source, I'd love to see a comparison to CryptPad[2]
> which is why we’ve made all our apps and encryption libraries open source
[0] https://proton.me/drive/security https://proton.me/drive/security
[1] https://proton.me/community/open-source https://proton.me/community/open-source
[2] https://cryptpad.org/ https://cryptpad.org/
- chrisco255 2y agoThis is their monorepo for their clients, including Proton Drive: https://github.com/ProtonMail/WebClients https://github.com/ProtonMail/WebClients
- winter_blue 2y agoOh wow. Wouldn't this make it easy for someone to just use/fork the code here to create a competitor?
- lazyc97 2y agoOnly the clients source code are available, so we know what data is encrypted before sending to server. The server side is closed source.
- maronato 2y agoYeah, but why would anyone use the competitor? Proton’s biggest advantages are its security and privacy. It’s hard to back that up with code and even more with plain words. Having their code be open source is a very important step in maintaining that image, and that image is not something a competitor can just plagiarize.
- thebytefairy 2y agoIn addition to what others have said, the license is GPL3, so a competitor would legally need to open source their app too.
- butz 2y agoSo what is stopping us from building native Linux client for Proton Drive, as Proton is clearly not interested in doing that?
- gamblor956 2y agoNothing. That's the point of making their repos available. They simply don't view the Linux market as sufficiently large enough to justify handling this internally.