Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Indian government moves to ban ProtonMail after bomb threat

androidcentral.com

Post reply on HN
Print view View original

151–160 of 173 posts

Re: Indian government moves to ban ProtonMail after bomb threat

#151

Post by bheadmaster »

WarOnPrivacy wrote: post #72
bheadmaster wrote: post #10

Earlier quoted context omitted.

> Now, how do they enforce / check these "assemblies of people" depends on the people you ask. I assume police officers enforce / check them when they need to fill their ticket quota, want to get money through a bribe, or just want to punish someone who personally annoyed them? That's how it usually works with half-enforced laws. In every law, there should be a requirement that it either gets enforced equally, or it…

> In every law, there should be a requirement that it either gets enforced equally, or it loses power. The evil twin of this is maximized enforcement where enforcement and punishment have become a strong focus and shaping societal behavior is maybe a justification. It is the point at which we have lost our way.

Which in turn is caused by inflexibility of law change.

If a law in place is found to be overly strict or general, then it should be changed or removed, and doing so should be simple and swift.

Re: Indian government moves to ban ProtonMail after bomb threat

#152

Post by rldjbpin »

you have to wonder just how much such rulings help anyone.

- practically nobody uses the service in the country (especially when dealing with hundreds of millions connected on the internet), and for some this might have a streissand effect. - those using such services for nefarious reasons would have little to no reason to abide by it. IT law enforcement is already very ineffective as it is, and would only be used as a lever when dealing with cases the administration has special interest in. - this is not really a matter of encryption but about data sharing arrangements with other countries (as correctly pointed out in the comments). funnily enough it is against the law to refuse decryption (https://en.wikipedia.org/wiki/Information_Technology_Act%2C_...).

Re: Indian government moves to ban ProtonMail after bomb threat

#153

Post by protonmail »

_heimdall wrote: post #148
behringer wrote: post #129

Earlier quoted context omitted.

That is completely untrue. Email supports end to end encryption between any two servers. You set each server up with a list of supported protocols and denied protocols. If either side can't agree on the encryption algorithm, then the email does not go through. If both sides do agree, which is almost always the case if both sides are using industry standard encryption methods, then the email is end to end encrypted. O…

There aren't many services that support e2e encryption though. I've been a Protonmail user for years and only remember being able to send encrypted emails to other PM users, maybe Fastmail also supports the same protocols? Regardless, if I'm not mistaken encryption protocols are layered on and not part of the official email spec. I'm not 100% on that so may it was added to the spec as an optional feature, but by no m…

Hi! PGP is open source, and therefore Proton Mail's encryption is interoperable with anyone who uses PGP to encrypt their emails: https://proton.me/blog/what-is-pgp-encryption. Proton Mail also allows you to send password-protected emails to anyone: https://proton.me/support/open-password-protected-emails.

Re: Indian government moves to ban ProtonMail after bomb threat

#154

Post by protonmail »

upofadown wrote: post #47

This all seems a bit confused. This has nothing to do with encryption. ProtonMail cooperates with law enforcement to track down users, but they do need a proper legal process. They won't just release user information on a simple request. They do have the ability to capture IP addresses. ProtonMail is accessible over Tor, but they don't allow registration/verification over Tor.

Hi! It is in fact possible to signup via our onion website or using Tor browser.

Re: Indian government moves to ban ProtonMail after bomb threat

#155

Post by mdp2021 »

mdp2021 wrote: post #106
alephnerd wrote: post #74

Earlier quoted context omitted.

> blocking one out of many ways that someone could make an anonymous threat, it somehow contributes to the safety of their citizens If you make an anonymous bomb threat using Gmail in India, Google will hand off all information to the Indian government as they have operations in India and will be held liable, just like they would in the US. This is the reason why Proton AG honors American law enforcement requests - t…

> using Gmail in India, Google will hand off all information Why should you use am E-Mail provider to send an electronic postcard. Since when would you need a third party to send E-Mails?

Explain yourself, usual annoying sniper...

To the best of my memory, sending emails did not require external infrastructure.

Re: Indian government moves to ban ProtonMail after bomb threat

#156

Post by upofadown »

protonmail wrote: post #154
upofadown wrote: post #47

This all seems a bit confused. This has nothing to do with encryption. ProtonMail cooperates with law enforcement to track down users, but they do need a proper legal process. They won't just release user information on a simple request. They do have the ability to capture IP addresses. ProtonMail is accessible over Tor, but they don't allow registration/verification over Tor.

Hi! It is in fact possible to signup via our onion website or using Tor browser.

But do you have to provide any information during such a signup that could be used to identify you in response to a valid legal warrant of some type? The "verification".

Re: Indian government moves to ban ProtonMail after bomb threat

#157

Post by protonmail »

upofadown wrote: post #156
protonmail wrote: post #154

Earlier quoted context omitted.

Hi! It is in fact possible to signup via our onion website or using Tor browser.

But do you have to provide any information during such a signup that could be used to identify you in response to a valid legal warrant of some type? The "verification".

This depends on the exit node, so if you are experiencing this, we recommend trying another one. If it persists, contact us here so we can take a closer look: https://proton.me/support/contact

Re: Indian government moves to ban ProtonMail after bomb threat

#159

Post by upofadown »

protonmail wrote: post #157
upofadown wrote: post #156

Earlier quoted context omitted.

But do you have to provide any information during such a signup that could be used to identify you in response to a valid legal warrant of some type? The "verification".

This depends on the exit node, so if you are experiencing this, we recommend trying another one. If it persists, contact us here so we can take a closer look: https://proton.me/support/contact

Experiencing what? To phrase my question differently: can someone show up on a Tor connection and make a new account without giving Proton any indication of who they are? So that in the case they abuse the account somehow, the only thing that Proton can do is just cancel the account?

Re: Indian government moves to ban ProtonMail after bomb threat

#160

Post by _heimdall »

protonmail wrote: post #153
_heimdall wrote: post #148

Earlier quoted context omitted.

There aren't many services that support e2e encryption though. I've been a Protonmail user for years and only remember being able to send encrypted emails to other PM users, maybe Fastmail also supports the same protocols? Regardless, if I'm not mistaken encryption protocols are layered on and not part of the official email spec. I'm not 100% on that so may it was added to the spec as an optional feature, but by no m…

Hi! PGP is open source, and therefore Proton Mail's encryption is interoperable with anyone who uses PGP to encrypt their emails: https://proton.me/blog/what-is-pgp-encryption . Proton Mail also allows you to send password-protected emails to anyone: https://proton.me/support/open-password-protected-emails .

PGP is its own protocol though, right? Meaning it is an optional addition to email and not part of the email spec at all?
Post reply on HN