3 ms·
Would you care to remind everybody how they can guarantee that the party they are interacting with is in fact Proton even though anybody watching or facilitatin
by freeopinion 1y ago
Would you care to remind everybody how they can guarantee that the party they are interacting with is in fact Proton even though anybody watching or facilitating the interaction won't be able to know?
- 3np 1y agoToday? Use their .onion address[0] over Tor and TLS. The TLS certificate is secured by the tor secret service key. No WebPKI or centralized CAs required. For tomorrow we should keep exploring and adopting improvements. Pick your poison. [0]: Discovery left as excercise for reader
- mzajc 1y agoBy this logic one could simply download Protonmail's TLS certificate instead of trusting a CA and access the service via clearnet. Fully decentralized. Discovery, once again, left as excercise for reader.
- 3np 1y agoPresumably the ISPs and vendors will be forced to block you/Proton there via regular means, so no.