Comment on Alternative to Gmail? I currently use my own domain for email, but i miss the priority inbox
kumi@feddit.online 2 days agohttps://discuss.privacyguides.net/t/proton-mail-discloses-user-data-leading-to-arrest-in-spain/18191
Before that: https://www.wired.com/story/protonmail-amends-policy-after-giving-up-activists-data/
There are many, many more cases we don’t hear about in media.
If you consistently connect to Proton via I2P or tor and don’t link a phone number or tracable recovery mail, you’re covering up at least some of the juicy metadata.
CTDummy@piefed.social 2 days ago
Thanks for the links, the recovery email aspect was covered in the initial comment old mate was replying to. I was more interested in if the hand your ass over remark had anything to do with the “they cant read your emails”/encryption part. The second link is very interesting though:
kumi@feddit.online 2 days ago
Auhorities in other European countries are known to MitM SSL certs at VPS providers for years already. Switzerland is moving their legislation towards the EU direction. Proton themselves have been vocal about their concerns about this.
How long until someone realizes they can demand Proton to inject some extra JS into the webmail for desired targets? Folks in a sensitive situation should follow the established best-practice of not relying on browser JS for PGP email. To be safe against this vecor, handle your encryption and signing outside of the webmail; either in your own client or copy/pasting.
CTDummy@piefed.social 2 days ago
Fuck that is depressing. I had hoped I’d be able to pay for a service and not worry about this shit to avoid the hassle of self hosting. Very informative thank you.