Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Is Protonmail logging my email content?

news.ycombinator.com

Post reply on HN
Print view View original

21–30 of 53 posts

Re: Is Protonmail logging my email content?

#21

Post by nimbius »

1cvmask wrote: post #7

They have already being known to log emails when enforced by the Swiss authorities: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre... https://protonmail.com/blog/transparency-report/ —— In case you trust Swiss companies blindly: https://en.wikipedia.org/wiki/Crypto_AG https://www.thebureauinvestigates.com/stories/2021-12-06/swi...

S/swiss//

The problem capitalist consumers have is conflating product marketing features and corporate objective statements with their own prerogatives.

No corporation will ever at the users behest break a law that could impact a quarterly earnings statement.

If you need more security its time to succor the haggard burro we call PGP, and enchant it with holy Bernstein's ED25519. It is hard so you will not like it. Because it is hard HN will lambasted it, turn away from its glory and call it false, but verily it is the way. because it is hard it cannot be broken easily, even by state actors, even by the gods of the market itself.

Re: Is Protonmail logging my email content?

#22

Post by MaxBarraclough »

nimbius wrote: post #21
1cvmask wrote: post #7

They have already being known to log emails when enforced by the Swiss authorities: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre... https://protonmail.com/blog/transparency-report/ —— In case you trust Swiss companies blindly: https://en.wikipedia.org/wiki/Crypto_AG https://www.thebureauinvestigates.com/stories/2021-12-06/swi...

S/swiss// The problem capitalist consumers have is conflating product marketing features and corporate objective statements with their own prerogatives. No corporation will ever at the users behest break a law that could impact a quarterly earnings statement. If you need more security its time to succor the haggard burro we call PGP, and enchant it with holy Bernstein's ED25519. It is hard so you will not like it. Be…

> No corporation will ever at the users behest break a law that could impact a quarterly earnings statement.

It's rare to see it, but there's a third option: shut it all down. Lavabit did this.

https://en.wikipedia.org/wiki/Lavabit#Suspension_and_gag_ord...

Re: Is Protonmail logging my email content?

#23

Post by ziddoap »

nimbius wrote: post #21
1cvmask wrote: post #7

They have already being known to log emails when enforced by the Swiss authorities: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre... https://protonmail.com/blog/transparency-report/ —— In case you trust Swiss companies blindly: https://en.wikipedia.org/wiki/Crypto_AG https://www.thebureauinvestigates.com/stories/2021-12-06/swi...

S/swiss// The problem capitalist consumers have is conflating product marketing features and corporate objective statements with their own prerogatives. No corporation will ever at the users behest break a law that could impact a quarterly earnings statement. If you need more security its time to succor the haggard burro we call PGP, and enchant it with holy Bernstein's ED25519. It is hard so you will not like it. Be…

Data that was handed over included IP addresses of access, timing of access, email subjects, email metadata, and total number of emails in the account.

I'm not sure what PGP or ED25519 would do for those? The emails themselves are already encrypted.

Re: Is Protonmail logging my email content?

#24

Post by inter_netuser »

ziddoap wrote: post #16
1cvmask wrote: post #7

They have already being known to log emails when enforced by the Swiss authorities: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre... https://protonmail.com/blog/transparency-report/ —— In case you trust Swiss companies blindly: https://en.wikipedia.org/wiki/Crypto_AG https://www.thebureauinvestigates.com/stories/2021-12-06/swi...

This is always posted like some 'gotcha', despite it being right there in the transparency report. In case you trust any company blindly: any company that wants to keep playing the money game will follow the laws forced upon them by the government they are beholden to.

interesting way to put it, "the money game".

did you see that somewhere?

Re: Is Protonmail logging my email content?

#25

Post by sparkling »

cassianoleal wrote: post #8
rpadovani wrote: post #6

Was the email sent TO or FROM a protonmail address? Does it also happen if it is protonmail to protonmail? Unrelated: what's the name of the tool you use to "listen" to DNS calls?

> what's the name of the tool you use to "listen" to DNS calls? Just found that out myself. It's http://dnslog.cn/ .

Alternative: https://canarytokens.com/generate

Re: Is Protonmail logging my email content?

#26

Post by gizdan »

Seems odd for PM to be vulnerable by the log4j CVE considering (from what I understand) they're mostly Go house. Maybe in the Android app, but otherwise I'd be surprised.

Unrelated: I've been getting quite frustrated with some of the functionality and limitations of PM especially for the price I pay (I have 2 catch-all domains, 1 user for each, which requires 2 times pro accounts), so recently I've been trying to migrate away to mailbox.org. Mailbox allows for automatic PGP encryption when the emails come in which is great. However, there is no way to move all my PM emails onto my mailbox.org account while keeping the encryption (not via the original key set up in Protonmail, nor via new key set up in mailbox.org). Has anyone ever run into such a scenario, and what can be done in this scenario?

Re: Is Protonmail logging my email content?

#27

Post by edoceo »

inter_netuser wrote: post #24
ziddoap wrote: post #16

Earlier quoted context omitted.

This is always posted like some 'gotcha', despite it being right there in the transparency report. In case you trust any company blindly: any company that wants to keep playing the money game will follow the laws forced upon them by the government they are beholden to.

interesting way to put it, "the money game". did you see that somewhere?

I first heard that in the 1990s. And the TV show "The Wire" (c2004?) made frequent use of the phrase "the game" to describe the process of street-dealing drugs, and the money, and the police, etc. As in "it's all in the game" - ie: all's fair in love and war.

Re: Is Protonmail logging my email content?

#28

Post by bgroat »

MaxBarraclough wrote: post #22
nimbius wrote: post #21

Earlier quoted context omitted.

S/swiss// The problem capitalist consumers have is conflating product marketing features and corporate objective statements with their own prerogatives. No corporation will ever at the users behest break a law that could impact a quarterly earnings statement. If you need more security its time to succor the haggard burro we call PGP, and enchant it with holy Bernstein's ED25519. It is hard so you will not like it. Be…

> No corporation will ever at the users behest break a law that could impact a quarterly earnings statement. It's rare to see it, but there's a third option: shut it all down. Lavabit did this. https://en.wikipedia.org/wiki/Lavabit#Suspension_and_gag_ord...

I think this is Mullvad's stance too.

Re: Is Protonmail logging my email content?

#30

Post by tejohnso »

ziddoap wrote: post #16
1cvmask wrote: post #7

They have already being known to log emails when enforced by the Swiss authorities: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre... https://protonmail.com/blog/transparency-report/ —— In case you trust Swiss companies blindly: https://en.wikipedia.org/wiki/Crypto_AG https://www.thebureauinvestigates.com/stories/2021-12-06/swi...

This is always posted like some 'gotcha', despite it being right there in the transparency report. In case you trust any company blindly: any company that wants to keep playing the money game will follow the laws forced upon them by the government they are beholden to.

Isn't this what seasteading, and other jurisdiction avoidance schemes attempt to address? I wonder if anything like that has ever worked out.
Post reply on HN