Edit: removed some statements for legal reasons. Bottom line is that too many weird unexpected things are still happening to peoples emails and attachments. ProtonMail isn’t helping themselves when their communication is “just upload your private key to our servers and then everything will work great again because we can sign your emails with your key for you! But don’t worry, we don’t have access to keys. We just use them to sign emails after it’s uploaded to our servers. The key we don’t have access to after it’s uploaded to our servers. That we then use to sign emails with forevermore.”
ProtonMail’s communication needs to be a lot more clear on these issues, they need a dumb docs page or slideshow or YouTube video that address all the concerns in a super concise way that can be linked when these concerns come up.
And especially they need a warrant canary that says “we’ve never handed a government the contents of a private accounts emails or the metadata for when/whom they sent/received emails from”.
—————————-
Definitely not[0].
Black market sellers are often kicked off protonmail for “illegal activity”.
LavaBit was probably the last “secure” email provider, they got an NSL for Edward Snowden and chose to fold up the entire company rather than carry out the orders in the NSL.
CounterMail may deserve an honorable mention, but you’d likely want all parties that you need to communicate securely with to also have a countermail account and it’s invite-only. P.S. I would love an invite if anyone has one: [email protected]
0: https://news.ycombinator.com/item?id=36639530
ProtonMail’s communication needs to be a lot more clear on these issues, they need a dumb docs page or slideshow or YouTube video that address all the concerns in a super concise way that can be linked when these concerns come up.
And especially they need a warrant canary that says “we’ve never handed a government the contents of a private accounts emails or the metadata for when/whom they sent/received emails from”.
—————————-
Definitely not[0].
Black market sellers are often kicked off protonmail for “illegal activity”.
LavaBit was probably the last “secure” email provider, they got an NSL for Edward Snowden and chose to fold up the entire company rather than carry out the orders in the NSL.
CounterMail may deserve an honorable mention, but you’d likely want all parties that you need to communicate securely with to also have a countermail account and it’s invite-only. P.S. I would love an invite if anyone has one: [email protected]
0: https://news.ycombinator.com/item?id=36639530