evidences:
1. https://s3.laisky.com/uploads/2021/12/proton-1.jpg
2. https://s3.laisky.com/uploads/2021/12/proton-2.jpg
3. https://s3.laisky.com/uploads/2021/12/proton-3.jpg
Is Protonmail logging my email content?
1–10 of 53 posts
Re: Is Protonmail logging my email content?
#2Recipient or sender using Proton VPN?
Re: Is Protonmail logging my email content?
#3This seems to me very worth looking into
Re: Is Protonmail logging my email content?
#4This is likely the spam filter scanning over the Links it finds in the E-Mail not actually something spitting the mail content into log4j (and I mean honestly, why would you even do that?)
Re: Is Protonmail logging my email content?
#5what the actual fuck
Re: Is Protonmail logging my email content?
#6Was the email sent TO or FROM a protonmail address?
Does it also happen if it is protonmail to protonmail?
Unrelated: what's the name of the tool you use to "listen" to DNS calls?
Re: Is Protonmail logging my email content?
#7They have already being known to log emails when enforced by the Swiss authorities:
https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre...
https://protonmail.com/blog/transparency-report/
——
In case you trust Swiss companies blindly:
https://en.wikipedia.org/wiki/Crypto_AG
https://www.thebureauinvestigates.com/stories/2021-12-06/swi...
Re: Is Protonmail logging my email content?
#8Was the email sent TO or FROM a protonmail address? Does it also happen if it is protonmail to protonmail? Unrelated: what's the name of the tool you use to "listen" to DNS calls?
> what's the name of the tool you use to "listen" to DNS calls?
Just found that out myself. It's http://dnslog.cn/ .
Re: Is Protonmail logging my email content?
#9This is likely the spam filter scanning over the Links it finds in the E-Mail not actually something spitting the mail content into log4j (and I mean honestly, why would you even do that?)
How would that work with e2e encryption? What spam filter system would even follow ldap links?
Re: Is Protonmail logging my email content?
#10Please be aware that we don't log email content (and we are also not vulnerable to Log4j). Our anti-spam systems do check for malicious links from third party email services so we can proactively warn users about phishing attempts.