Live data from Hacker News

ProtonMail now offers elliptic curve cryptography

protonmail.com

111–120 of 148 posts

Re: ProtonMail now offers elliptic curve cryptography

#112
post #6
post #2

Anyone using ProtonMail regularly? I created an account but haven’t used it much. How are your experiences? Any iOS users who can comment on their experience with proton mail and the default mail client? I don’t went to switch to something that won’t be around in a decade or so.

Switched to FastMail recently as I like to stay productive and didn't want to use Google Calendar.

Makes sense, ProtonMail's calendar will be released next year.

Re: ProtonMail now offers elliptic curve cryptography

#113
post #31
post #2

Anyone using ProtonMail regularly? I created an account but haven’t used it much. How are your experiences? Any iOS users who can comment on their experience with proton mail and the default mail client? I don’t went to switch to something that won’t be around in a decade or so.

Been using it as my main account for over a year, have an old gmail account which I'm giving a bit longer grace period until old clients and contacts stop emailing. Using it on iOS, it's works great but don't expect many features. Same can be said of the webapp. I use a custom domain so I'm not worried about it shutting down, I'll migrate to something else. One issue I've had is emails from new contacts sometimes sho…

Sorry about the issue with mail from new contacts ending up in junk. We're working on improving inbound spam filtering. For now, make sure you move those messages to the inbox folder, this will add them to your whitelist (which you can adjust within the Settings of your account).

Re: ProtonMail now offers elliptic curve cryptography

#114

This announcement is an example of why I am not using ProtonMail anymore. There are a lot of things they do that sound very good on marketing materials, but upon examination are security theater. For example, they claim, "We have chosen a particular elliptic curve system known as X25519, which is fast, secure, and particularly resistant to timing attacks. It’s simple to implement". However, previously they've said th…

We are aware of the the issues brought up in [0] and [1]. As suggested in [2], we are already considering to switch to an implementation in WebAssembly to mitigate the possibility of timing attacks on the web platform.

In our mobile and desktop apps, where timing attack resistance is easier to achieve, the X25519 implementation is already constant-time.

Once they are generated, keys are controlled by our users and not easily updated, so we wanted to make our choice of default curve as future-proof as we could while balancing speed and interoperability.

[0]: https://github.com/indutny/elliptic/issues/128

[1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861639#10

[2]: https://github.com/openpgpjs/openpgpjs/issues/720

Re: ProtonMail now offers elliptic curve cryptography

#115
post #2

Anyone using ProtonMail regularly? I created an account but haven’t used it much. How are your experiences? Any iOS users who can comment on their experience with proton mail and the default mail client? I don’t went to switch to something that won’t be around in a decade or so.

I switched to ProtonMail from Gmail (with a custom domain) about 6 months ago. The web app is a bit janky, compared to Gmail, but I use Apple Mail with their desktop bridge app and they work fairly well, together. Their iOS client is comparable to the default mail client, but not to the Gmail app in terms of features.

Would love to get more feedback on what you would like to see in the iOS app. You can add feedback here: https://protonmail.uservoice.com/ or send it to us directly. Next feature coming to the iOS app is multi-user support.

Re: ProtonMail now offers elliptic curve cryptography

#116
post #2

Anyone using ProtonMail regularly? I created an account but haven’t used it much. How are your experiences? Any iOS users who can comment on their experience with proton mail and the default mail client? I don’t went to switch to something that won’t be around in a decade or so.

I swapped last year around the end of November. I'm a fan of their filter DSL, which has let me keep my inbox pretty clean. I don't use desktop mail clients so the bridge thing doesn't bother me. Their web ui does just what I want it to, but their ios app doesn't seem to group conversations which is annoying. Overall 8/10 would recommend.

Conversation view on iOS will be coming soon as well!

Re: ProtonMail now offers elliptic curve cryptography

#117
post #2

Anyone using ProtonMail regularly? I created an account but haven’t used it much. How are your experiences? Any iOS users who can comment on their experience with proton mail and the default mail client? I don’t went to switch to something that won’t be around in a decade or so.

I use it as my main email, with a gmail account for throw-away spam, and have the protonmail Android app, I like both the web and android versions quite a bit; could have a few more features, but for everyday usage it is good. No frills but everything normal and easy to use.

Anything in particular that you'd like to see on Android? Would love to get your feedback: https://protonmail.uservoice.com/.

Re: ProtonMail now offers elliptic curve cryptography

#118
post #9
post #2

Anyone using ProtonMail regularly? I created an account but haven’t used it much. How are your experiences? Any iOS users who can comment on their experience with proton mail and the default mail client? I don’t went to switch to something that won’t be around in a decade or so.

I can't comment on the iOS client, but the Android client is what's primarily holding me back from switching to Protonmail as my default. The problem is that it keeps logging me out, for one reason or another, and to log back in I have to enter the password and TOTP code. That's a pain in the butt, and it makes it impossible for me to rely on for, say, airplane tickets.

Would you mind sending a ticket to support so we can look into this? https://protonmail.com/support-form

Re: ProtonMail now offers elliptic curve cryptography

#120
post #2

Anyone using ProtonMail regularly? I created an account but haven’t used it much. How are your experiences? Any iOS users who can comment on their experience with proton mail and the default mail client? I don’t went to switch to something that won’t be around in a decade or so.

Definitely make sure to use this, or any email service, with a custom domain. You’ll have to get an appropriate subscription, but it pays for itself thousandfold when changing providers without having to reverse update your entire contact list. Aside from that, yes I use proton, it’s fine. The Mac bridge is a joke but the rest works ok.

Have you tried the Bridge recently? We've been doing a lot of development there. Last update should fix a bunch of issues.
Post reply on HN