bartbutler

10 ms·

61.
by bartbutler 9y ago
ProtonMail is OpenPGP under the hood, not 'custom' encryption. Tutanota is custom.
62.
by bartbutler 9y ago
You get 10 VPN connections which you can distribute among your users however you see fit.
63.
by bartbutler 9y ago
It's a key escrow system. The admins hold a copy of the user's key, and promoting a new admin involves giving access to this key.
64.
by bartbutler 9y ago
That is exactly what we are doing, but it has to be done client-side of course, so it's not as simple as having a download link.
65.
by bartbutler 9y ago
We are working hard on import and export--they are top priorities, and we are fully aware that they are core features we are currently missing. Keep in mind that pretty much everything is more complex with encrypted email, and that includes
66.
by bartbutler 9y ago
@vabmit means well but he is not an employee of ProtonMail.
67.
by bartbutler 9y ago
You will be able to use the upcoming ProtonMail IMAP/SMTP bridge to do fulltext search locally.
68.
by bartbutler 9y ago
That was a mistake and we own it.
69.
by bartbutler 9y ago
Your access token to the service is encrypted with your primary public key as an extra security measure, thus your client needs to decrypt it to use it.
70.
by bartbutler 10y ago
That's a limited definition of MITM. That would be an active attack, and yes, this does nothing for that for the web app--the native apps are a different story. However, there are plenty of corporate PCs and other machines with root ce
71.
by bartbutler 10y ago
There's a difference between an active attacker and a passive MITM attacker. Doing this for the web app in addition to the native apps helps prevent a passive MITM attack from stealing login credentials.
72.
by bartbutler 10y ago
Also, yes, the application is web-based, but we also have native mobile clients which use the same API, and are working on two more native options for desktop.
73.
by bartbutler 10y ago
Sorry for any confusion. We don't use TLS-SRP, we use certificate TLS, and SRP on top of it. The short discussion on TLS-SRP was trying to address any potential questions about different choices we made with respect to TLS-SRP.