this post was submitted on 02 Oct 2023
126 points (95.0% liked)
Privacy
31886 readers
627 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I'm simply reporting on what I've been told and saw. Form what I read seem to be using asymmetric encryption and generating a private key itself protected with your password when you sign up. There's no guarantee they don't have an unprotected copy of that as well.
Vast majority of Proton users signed up because Proton promises your data is safe at rest. Even from them. In fact, they specifically advertise this protects them from subpoenas because they cannot provide decrypted copy of user's data.
Of course, the only emails that are encrypted with proton are proton->proton. Mail between proton and anyone else, like say gmail, isn't encrypted unless you pgp it separately.
Not fully correct. Mails between Proton users are E2E encrypted where Proton cannot see them, and rest of the emails are encrypted at rest once Proton receives them. Based on the audits and open source code, Proton is not keeping a copy of those emails when it receives them, and once they are encrypted, nobody but you will have access to it