Live data from Hacker News

ProtonMail now offers elliptic curve cryptography

protonmail.com

131–140 of 148 posts

Re: ProtonMail now offers elliptic curve cryptography

#131
post #50

I was silly enough to sign up without looking in to it because it was recommended on HN. Then I realised they need this bridge software to connect. I asked about it stating I'd like to build it my self and confirm it is libre software. They just sent back a generic link to a .deb beta file. I had a look and its got this eula.txt with the standard you-have-no-rights. Messaged them again asking what they intended to do…

I'm actually kind of surprised to see the only reference to lavabit, in all of the comments, is that it was shutdown. It seems to be back and their server is open source: https://github.com/lavabit/magma although you can pay for their hosted version also: https://lavabit.com

Re: ProtonMail now offers elliptic curve cryptography

#132
post #9

Earlier quoted context omitted.

I can't comment on the iOS client, but the Android client is what's primarily holding me back from switching to Protonmail as my default. The problem is that it keeps logging me out, for one reason or another, and to log back in I have to enter the password and TOTP code. That's a pain in the butt, and it makes it impossible for me to rely on for, say, airplane tickets.

Would you mind sending a ticket to support so we can look into this? https://protonmail.com/support-form

Sure, I can do that again. My previous tedious interaction with your support department ended in this conclusion:

>Sometimes, when the ProtonMail app is updated to a new version and that update is bigger and more incremental, that could happen.

That's unsatisfactory. However it does not address the complaint I had at the time that every once in a while a notification appears that tells me I have been logged out, with no explanation. I don't know if that still happens, as I cannot be bothered to keep logging in on my phone. I'll give it a new try now.

Retrieving that quote for you meant I had to browse my Protonmail archive. I could log in via web, but for some reason your TOTP works differently from everywhere else: I have to enter it every time, and there is no way for me to "remember this browser". I could use the Bridge, but for some reason the Bridge, too, logs me out whenever it feels like it. Again, I have to enter both factors with no option to trust permanently.

Do you see how these paper cuts could demotivate me?

Re: ProtonMail now offers elliptic curve cryptography

#133
post #100

Earlier quoted context omitted.

Out of curiosity, what did you switch to? I'd like to leave Gmail and Proton Mail seems to be pretty well recommended. Is Fast Mail a better option?

I've been using Tutanota for almost a year now and it's pretty good. I'm no expert on encryption but that part also seems pretty solid [0,1]. NordVPN "leans towards" TN over PM, but only for convenience and not security (that's more or less equal between the two)[2]. However, PM is based in Switzerland (not bound by GDPR), while TN is in Germany (bound by GDPR and other privacy laws that the EU is really progressive…

Switzerland has its own GDPR-like privacy act.

Re: ProtonMail now offers elliptic curve cryptography

#134
post #73

Earlier quoted context omitted.

Out of curiosity, what did you switch to? I'd like to leave Gmail and Proton Mail seems to be pretty well recommended. Is Fast Mail a better option?

Fastmail is a great service, the caveat is that they are based in Australia. Take that for what it's worth.

Fastmail the company is based in Australia, while Fastmail's servers are located in the US. Take that for what it's worth, considering Five Eyes!

Re: ProtonMail now offers elliptic curve cryptography

#135
post #31

Earlier quoted context omitted.

Been using it as my main account for over a year, have an old gmail account which I'm giving a bit longer grace period until old clients and contacts stop emailing. Using it on iOS, it's works great but don't expect many features. Same can be said of the webapp. I use a custom domain so I'm not worried about it shutting down, I'll migrate to something else. One issue I've had is emails from new contacts sometimes sho…

Sorry about the issue with mail from new contacts ending up in junk. We're working on improving inbound spam filtering. For now, make sure you move those messages to the inbox folder, this will add them to your whitelist (which you can adjust within the Settings of your account).

Thanks for getting back to me, I have been moving those messages back into the inbox, I'll take a look at the whitelist. Overall very happy with the service and ProtonVPN too. Keep it up!

Re: ProtonMail now offers elliptic curve cryptography

#136
post #100

Earlier quoted context omitted.

Out of curiosity, what did you switch to? I'd like to leave Gmail and Proton Mail seems to be pretty well recommended. Is Fast Mail a better option?

I've been using Tutanota for almost a year now and it's pretty good. I'm no expert on encryption but that part also seems pretty solid [0,1]. NordVPN "leans towards" TN over PM, but only for convenience and not security (that's more or less equal between the two)[2]. However, PM is based in Switzerland (not bound by GDPR), while TN is in Germany (bound by GDPR and other privacy laws that the EU is really progressive…

My biggest issue with Tutanota is there's no IMAP support. I don't wish to jump through hoops to get my mail out easily and in standard formats if I want to leave a service. That's why I won't use it. Same goes for ProtonMail, which is slightly better but has a tedious IMAP bridge to be installed and used for paid accounts.

Re: ProtonMail now offers elliptic curve cryptography

#137
post #2

Anyone using ProtonMail regularly? I created an account but haven’t used it much. How are your experiences? Any iOS users who can comment on their experience with proton mail and the default mail client? I don’t went to switch to something that won’t be around in a decade or so.

I have very limited experience. The client seems to log you out once in a while, as if it's a banking app. That's been an annoyance for me. On the free tier, you cannot login to more than one account at a time on the app. That's another annoyance. You cannot export your mails from ProtonMail unless you have a paid account and use a computer with their IMAP bridge software installed.

Re: ProtonMail now offers elliptic curve cryptography

#138

Unsolicited opinion on ProtonMail: I'm a big fan. It's not as flashy as gmail, but so far my mails haven't been marked as spam, which was happening with zoho. Unfortunately, zoho doesn't provide free email forwarding, so the migration to PM is taking longer than hoped for. I'll probably soon subscribe to PM for two reasons: to use the @pm.me domain for outgoing (currently only incoming), and for custom domain support…

Note that IMAP support is only through a bridge software that you have to install and configure.

Re: ProtonMail now offers elliptic curve cryptography

#140
post #52

Earlier quoted context omitted.

We use proton for our business mail (small startup The idea is great, works well, and we support it as best we can. However they REALLY need to step up their game in terms of making it easy to manage as opposed to just "moar security!". I put in tickets for each of the aforementioned pain points 6 months ago, and heard nothing back really. I doubt the developers ever got to see them. If they want more money and more…

Hey, I work with ProtonMail. Sorry you haven't heard back from support. Would you mind sending the feedback to enterprise@protonmail.com? We're actively working on getting most of the mentioned features out the door, but would love to get some specifics from you. In case I don't hear from you, HTML Signatures are live. Thanks!

Will email later thanks for letting me know this. The specifics I was getting at was being able to paste a raw html signature or set a signature for a group of people. You can use html in signatures but you're limited to using you tinymce editor. It does, however, work and save properly if you edit the source of the page and then save it...so I can't see why I can't just paste in my html as is? Anyway, sorry for having a bit of a rant here. I'll forward the specific tickets etc. I sent later today. Cheers
Post reply on HN