3 ms·
Delaware incorporation is the norm, but for anyone who cares about dragnet surveillance, the state of incorporation is important, as well as the country. Proto
by notepad0x90 2y ago
Delaware incorporation is the norm, but for anyone who cares about dragnet surveillance, the state of incorporation is important, as well as the country.
Proton also does end-to-end encrypted email and supposedly, your emails are never stored decrypted, they are decrypted in your browser and in ingress/egress out of their environment. They're also hosting in switzerland.
That said, like many, I also am looking for an alternative. I pay them too much to not care about their CEO's political commentary.
- deleted 2y ago[deleted]
- jurgenaut23 2y agoWhat kind of commentary are you referring to?
- homarp 2y agosee https://news.ycombinator.com/item?id=42837181 https://news.ycombinator.com/item?id=42837181
- WrongOnInternet 2y ago[dead]
- sangnoir 2y ago> They're also hosting in switzerland. Crypto AG was also based in Switzerland - that by itself mattered very little because it was owned by the CIA and the West Germany Intelligence service.
- dejan 2y agoend-to-end encryption? yes, if both users are on Proton - but don't call it email then. Storing encrypted makes only sense when keys are not in their hands. Plaintext password enters their system on each login which means they can have your decryption key at any point if needed. smoke and mirrors marketing...
- notepad0x90 2y agoif they use the email/smtp protocol then it's email. plaintext password does not enter their system. For example I still have to enter a second password for the in-browser decryption (although these days they use the same password). Most of security feels like theatrics, but small measures that add difficulty for a potential threat actor add up.
- dejan 2y agoI think you are misreading my comment: they are the threat actor themselves, tricking users in believing they are better off via Proton. SMTP does not encrypt messages and they arrive at Proton's inbound relays unencrypted, are scanned in plaintext for spam etc. At this point they can Bcc anything to another relay/account and keep a copy of all inbound messages BEFORE anything gets encrypted. Access to historical messages? One line of code for logging, and let's not forget GPG does not encrypt the metadata which is readily available. How about FTS indexes, are they also decrypted on the fly in the browser? Email is complex and not many have the patience to understand the monster behind, but lying about it, as Proton does - I find it just insulting to our profession. Also "Swiss neutral", this is even more offending. Swiss execute US orders regularly. Translated: https://daslamm-ch.translate.goog/ueberwachungsoase-statt-datenschutzparadies/?_x_tr_sl=auto&_x_tr_tl=it&_x_tr_hl=en&_x_tr_pto=wapp https://daslamm-ch.translate.goog/ueberwachungsoase-statt-da... Original: https://daslamm.ch/ueberwachungsoase-statt-datenschutzparadies/ https://daslamm.ch/ueberwachungsoase-statt-datenschutzparadi... What we really need instead of such shams is a new mail system that does not depend on trusting providers and especially not a SINGLE provider.
- Ylpertnodi 2y ago>They're also hosting in switzerland. ....means nothing. Unless you know something the rest of us don't?
- notepad0x90 2y agothey're very protective about giving foreign states/entities access to information stored by swizz companies. It's not just for banking. As an american,any country not part of the five-eyes coalition and also not a hostile country is great. Not that I have anything to hide, I just want to support a culture of privacy.
- ChoGGi 2y ago*Swiss