3 ms·
Encrypting e-mails at rest on the server should be done anyway and is nothing to brag about. Obviously there's nothing the e-mail provider can do about e-mail t
by x1798DE 12y ago
Encrypting e-mails at rest on the server should be done anyway and is nothing to brag about. Obviously there's nothing the e-mail provider can do about e-mail that's not sent end-to-end encrypted - that's just a fact and implying that they can make things somehow safer by automatically encrypting your e-mails as they come in is hiding this fact. That is in fact exactly what's concerning me - whether they are deluding themselves or others into thinking that this is providing any significant security, they're essentially inducing people to use insecure practices.
My guess is that while there's some aspects of forward secrecy to the fact that you're using your GPG key to decrypt the e-mails client-side (which is significantly better than ProtonMail's approach, which is basically full-on snake oil), given the fact that a huge proportion of your non-PGP-using counterparties are going to be using Yahoo Mail, Hotmail and GMail anyway, anyone with a warrant will just get the full, unencrypted text of all your communications from them anyway.