this post was submitted on 07 May 2024
46 points (94.2% liked)

Proton

4904 readers
90 users here now

Empowering you to choose a better internet where privacy is the default. Protect yourself online with Proton Mail, Proton VPN, Proton Calendar, Proton Drive. Proton Pass and SimpleLogin.

Proton Mail is the world's largest secure email provider. Swiss, end-to-end encrypted, private, and free.

Proton VPN is the world’s only open-source, publicly audited, unlimited and free VPN. Swiss-based, no-ads, and no-logs.

Proton Calendar is the world's first end-to-end encrypted calendar that allows you to keep your life private.

Proton Drive is a free end-to-end encrypted cloud storage that allows you to securely backup and share your files. It's open source, publicly audited, and Swiss-based.

Proton Pass Proton Pass is a free and open-source password manager which brings a higher level of security with rigorous end-to-end encryption of all data (including usernames, URLs, notes, and more) and email alias support.

SimpleLogin lets you send and receive emails anonymously via easily-generated unique email aliases.

founded 1 year ago
MODERATORS
 

Proton Mail came under scrutiny for its role in a legal request by the Spanish authorities leading to the identification and arrest of a user.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 28 points 3 months ago (2 children)

This has nothing to do with email as a protocol. The court order discussed in the article asked for the recovery email address of an account. No actual email data was transferred.

[–] [email protected] 5 points 3 months ago

I'm aware. But some user data and metadata required for email protocol to function that can't be encrypted is the fundamental issue. No provider can solve this issue, no matter how private and secure they are.

In this specific case, the user was a dumbass and linked another email that was tied to Apple. My point was more about email being flawed by design and a need for an alternative protocol if we want true privacy.

[–] [email protected] -5 points 3 months ago (3 children)

I wonder what the authorities could use the recovery email for? Did they gain access to the Protonmail through the recovery email?

[–] [email protected] 17 points 3 months ago

It's in the article ffs. The recovery email was managed by Apple, so they made a request to Apple and obtained the users real identitiy. Once they arrest the user they can gain access to all the users accounts — unless the user had specifically guarded themselves against that possibility.

[–] [email protected] 7 points 3 months ago (1 children)

Recovery email was tied to Apple, so they asked Apple to private the data they needed. No email content was shared at any point from Proton.

[–] [email protected] 1 points 3 months ago

Man. Apple is really terrible here.

[–] [email protected] 4 points 3 months ago* (last edited 3 months ago)

If they could get into the recovery email, yeah, they could get into his Proton account. Also useful just for confirming the ID of the person in question.