Comment on India may block Proton Mail

iopq@lemmy.world ⁨4⁩ ⁨months⁩ ago

• Squeak@lemmy.world ⁨4⁩ ⁨months⁩ ago

  Congrats, you just invented ProtonMail

  source

  • BearOfaTime@lemm.ee ⁨4⁩ ⁨months⁩ ago

    Its not encrypted when 99% of your contacts aren’t on Proton.

    source

    • naticus@lemmy.world ⁨4⁩ ⁨months⁩ ago

      You can encrypt it for non-Proton users very easily.

      source

      • bigMouthCommie@kolektiva.social ⁨4⁩ ⁨months⁩ ago

        oh? i have friends that use protonmail and i've asked them to do it. no one has succeeded yet

        source

        • -> View More Comments
• akilou@sh.itjust.works ⁨4⁩ ⁨months⁩ ago

  Then use Proton Mail

  source
• GigglyBobble@kbin.social ⁨4⁩ ⁨months⁩ ago

  What a stupid thing to say.

  Whatever your favorite (and probably shitty) proprietary or open source messaging service - not everybody has it. But hey, everyone has email, so let's kill that.

  source

  • baseless_discourse@mander.xyz ⁨4⁩ ⁨months⁩ ago

    ProtonMail uses PGP encryption to encrypt emails, which means your meta data, including subject line is vulnerable to data collection. Also there is no forward secrecy with current PGP standard.

    We have built Proton Mail with PGP fully integrated, … All messages between Proton Mail users are automatically end-to-end encrypted.

    proton.me/support/how-to-use-pgp

    Subject lines and recipient/sender email addresses are encrypted but not end-to-end encrypted.

    proton.me/…/proton-mail-encryption-explained

    source
  • asdfasdfasdf@lemmy.world ⁨4⁩ ⁨months⁩ ago

    IDK, I think that’s kind of flawed logic. E.g. “we should stop using gasoline for cars and switch to electric” - would you say “what a stupid thing to say. everyone uses gas so we shouldn’t try to stop”?

    And are you not aware of Signal? It’s open source, and the default server is not, but it doesn’t matter since it is E2E encrypted, just like Proton. The difference is that ProtonMail allows you to communicate unencrypted with non-ProtonMail accounts.

    I think all they’re saying is that, similar to gas users, there are many people who will not stop using it or just don’t care unless we sunset gas cars / email for them.

    I do agree with that, and in both cases it isn’t something which can happen overnight, but it is a serious long term problem which IMO we should be pushing to solve.

    source
  • iopq@lemmy.world ⁨4⁩ ⁨months⁩ ago

    Oh no, profiling. Google can read your emails directly

    source

    • GigglyBobble@kbin.social ⁨4⁩ ⁨months⁩ ago

      No, they can't since I don't have a Google mail address. Even if I had, they'd have a harder time building a social graph when I communicate with others outside of Gmail.

      source

      • iopq@lemmy.world ⁨4⁩ ⁨months⁩ ago

        Okay, but unless all of your communication is e2e encrypted, your provider can read all of your messages. They can even show you ads based on the contents. Oh, you bought vitamins on Amazon? How about some minerals?

        If I send messages with matrix, the matrix server admin cannot read them. If I cared about them seeing who I’m talking to, I would run my own server

        source
• Primarily0617@kbin.social ⁨4⁩ ⁨months⁩ ago

  you can e2e encrypt emails though?

  source

  • BarrierWithAshes@kbin.social ⁨4⁩ ⁨months⁩ ago

    And then just go PGP if you want even more security.

    source
  • iopq@lemmy.world ⁨4⁩ ⁨months⁩ ago

    Yet everyone sends me one time passwords in plain text

    source
• bigMouthCommie@kolektiva.social ⁨4⁩ ⁨months⁩ ago

  autocrypt has been around a while. get your contacts to use it.

  source
• knobbysideup@sh.itjust.works ⁨4⁩ ⁨months⁩ ago

  That’s what s/mime does. If it were as easy to get personal certs as it is to get server certs through letsencrypt, everyone could easily sign and encrypt mail.

  I can certainly do it anyway, but you’d have to trust my self signed cert.

  source