Protonmail Recommended Browsers

Post by [deleted] » Thu, Aug 25, 2022, 3:30 PM UTC

feanaro wrote: post #72

mherrmann wrote: post #36

Earlier quoted context omitted.

Disclaimer: I do consulting work for Brave. Opinions my own. Maintaining a browser is a huge amount of work. The web evolves constantly and security fixes are extremely important. Being competitive in the space requires a very large amount of engineering resources. A commercial entity has a sustainable path to providing those resources. While nobody likes ads, I think they're opt-in in Brave and at the end of the day…

> Most of Brave is developed in the open. Where it isn't, there are good reasons why such as for example security. I don't think you can muster a good security reason for not developing something in the open.

Post by ridgered4 » Thu, Aug 25, 2022, 3:45 PM UTC

tingle wrote: post #127

ridgered4 wrote: post #63

I was until recently using protonmail for throwaway email addresses for various web forums as it allowed a captcha verification during creation. Every other one I'd tried demands SMS verification these days, which is right out. But proton mail recently changed and requires SMS or another email now, I believe they say it is to combat bots. I tried tutanota but it refuses to create an account at all over a VPN, or at l…

Were you using Tor Browser ? From Switzerland, I can create free Proton accounts by solving a captcha, if I'm using Safari or Firefox. But if I use Tor on the same computer, the only option is to enter a phone number.

Post by Turpen » Thu, Aug 25, 2022, 4:57 PM UTC

ragnese wrote: post #130

nextstep wrote: post #78

What’s wrong with Safari privacy-wise?

Probably nothing; Apple talks a good privacy talk and I always recommend Apple products to my non-nerd friends and family because of it. HOWEVER, I can't really get past the fact that it's closed source. At the end of the day, that means that Apple can say they do XYZ practice, and it's very likely to be true (some is testable, and imagine the shit-storm if a whistle blower showed that they really do store your keys,…

Post by pseudalopex » Thu, Aug 25, 2022, 5:10 PM UTC

ragnese wrote: post #129

alexmingoia wrote: post #82

Earlier quoted context omitted.

Their iCloud security page says “Safari History, Tab Groups, and iCloud Tabs” is end-to-end encrypted. So they store history to sync across devices but the keys are only on your devices. https://support.apple.com/en-us/HT202303

Are the "keys" just your iCloud password (or a deterministic derivative thereof)? Otherwise, how could your tabs magically appear on a new device?

Post by feanaro » Thu, Aug 25, 2022, 6:16 PM UTC

lazyier wrote: post #86

feanaro wrote: post #72

Earlier quoted context omitted.

> Most of Brave is developed in the open. Where it isn't, there are good reasons why such as for example security. I don't think you can muster a good security reason for not developing something in the open.

It's normal in any open source project to keep security mailing lists and things of that nature private. And for good reasons. One of the reasons is they are dealing with security related bug reports. Public disclosure before having a fix in place puts users at risk. Besides that 'security' is a process that all groups are responsible for. So it can't help being _developed_ in the open if the project is open. Which B…