It's so cute that they think that the NSA can't read PGP-encrypted messages.
Why ProtonMail is more secure than Gmail
21–30 of 314 posts
Re: Why ProtonMail is more secure than Gmail
#22Does 'millions of users' mean active users? Like those who login everyday?
Re: Why ProtonMail is more secure than Gmail
#23zero knowledge encryption means that there's no search functionality right?
I'm going to guess they implement something client-side using maybe IndexedDB or something?
Had the same idea when I read the comment. However, training your ML models in the browser is probably not the best thing you could do. Granted, it could potentially offer a more personalized service.
Re: Why ProtonMail is more secure than Gmail
#24I have to mention the Direct Project. This is secure email that is in use today by a vast number of healthcare professionals.
https://www.healthit.gov/providers-professionals/faqs/what-d...
It uses trust bundles that hold the public key. Identity is vetted so there is no spam and it helps guarantee you are communicating with the right person.
https://www.directmdemail.com/info/how-it-works/Direct-excha...
edit: I would also like to add that the direct trust model is starting to get used for things outside of email.
Re: Why ProtonMail is more secure than Gmail
#25Does anyone know how they reconcile "zero-knowledge" and allowing people to log in? Do they encrypt your private key with a KDF of your password or something?
Re: Why ProtonMail is more secure than Gmail
#26Re: Why ProtonMail is more secure than Gmail
#27Earlier quoted context omitted.
I'm going to guess they implement something client-side using maybe IndexedDB or something?
Had the same idea when I read the comment. However, training your ML models in the browser is probably not the best thing you could do. Granted, it could potentially offer a more personalized service.
Search doesn't really need ML to be effective
Re: Why ProtonMail is more secure than Gmail
#28I'm a paying user, and have to say, I think I may want to give up this extra security for Google's world class spam filtering.
you might want to check yahoo mail then.
I work for them (oath now). and at some point all employers were forced to dogfood it. the UI took a while to get used, but now I miss in app tabs witg several emails (in Gmail I need browser tabs).
...Long story short: after yahoo was acquired we moved to gmail. you cannot belive how much more spam shows up on my imbox that I had never seens before.
not to mention yahoo took the high road on properly fighting spam for everyone, even if made them loose some users using misconfigured email lists.
Re: Why ProtonMail is more secure than Gmail
#29I don't understand this. Let's say I receive a newsletter from some website.
That newsletter is not PGP-encrypted, so at some point the Proton Mail servers must be able to see a plaintext version of it. That means I have to trust that they never store that plaintext version.
In addition, even if they immediately encrypt it and store the encrypted version, how can they do so such that only I can read it? Is the key generated from my password? How come it's possible to reset my password with a recovery email address then? Surely they must be storing the key somewhere, in which case storing encrypted messages is pointless.
EDIT: apparently my second point is incorrect, forgetting your passphrase will indeed leave your emails permanently encrypted. The first point still stands though, it's not zero-knowledge at all if they receive the plaintext of my private emails in the first place and I have to trust that they don't store it.
Re: Why ProtonMail is more secure than Gmail
#30The engineer in me loves the promised End-End encryption and all the cool stuff. But, the inconvenience of "unable to search contents of emails" is a deal breaker towards encrypted email for me. My primary concern was Google/Microsoft scraping my emails to build a profile of me. My emails could give away very personal information that I do not want to be used for advertising. My money finally went to Fastmail. Excell…
Didn't Google stop scanning Gmail for ads targeting? https://www.nytimes.com/2017/06/23/technology/gmail-ads.html
They still scan email for product features. Travel receipts for things like "my flights" & Google Now, etc