Proton Pass: Open-Source and Encrypted Password Manager App

Post by WentFullRetard » Thu, Jul 20, 2023, 11:43 AM UTC

rmorey wrote: post #70

jacooper wrote: post #53

Earlier quoted context omitted.

Yup, for proton open source means client code only

I tend to think this is a fair trade-off for services like this because: 1) for end-to-end encrypted services, I think what you most want to verify is: is my data actually being encrypted with my keys before being sent over the network, which open-source clients allow you to do 2) you can't personally verify what code is running on a company's servers anyway and to a lesser extent: 3) there could be legitimate securi…

Post by hazmazlaz » Fri, Jul 21, 2023, 1:56 PM UTC

protonmail wrote: post #83

indigochill wrote: post #22

Earlier quoted context omitted.

I think in general one might consider "the cloud" to be virtual resources on hardware shared with third parties. So of course AWS/GCP/Azure, but DigitalOcean would probably also qualify since to my knowledge droplets are virtual servers on shared hardware. Although renting virtual resources on shared hardware can be convenient (much easier to provision virtual resources than real servers), there are a couple of drawb…

Yes, this is indeed what we mean. Proton does not use third-party providers for hosting encrypted user data. So none of the providers that people typically consider to be "cloud" such as AWS. What we do instead is own and operate all of our physical server hardware and network equipment in datacenters in Switzerland and Germany.