Earlier quoted context omitted.
Whatever happened to filtering client side?
Not much. It's as bad now as it was a decade ago.
In other words, about as good as gmail but with better control over false positives.
Why ProtonMail is more secure than Gmail
241–250 of 314 posts
Re: Why ProtonMail is more secure than Gmail
#242Even as a convinced protonmail user I think this post is too much advertising focused and not addressing the facts correctly. It would be better for the reputation of protonmail if they would resist launching such campaigns and stick to the real advantages that differentiate it from the competition.
Re: Why ProtonMail is more secure than Gmail
#243Earlier quoted context omitted.
Gmail isn't floating around any brochures on security though - it's pitch to the majority of its users is "It's Google and Mail and where most people have their emails. You don't want to be that one weirdo at @yahoo.com do you?" and that just about does it. ProtonMail is trying to recruit users with the brochure. That said, even though the argument is a bit flawed here, I think most attracted by it would still prefer…
Do you really believe people use gmail because of its brand? I don't know about any security brochure, but I know I can setup 2FA to use push notifications (not an insecure SMS number), and can check where all of my logins are from, and have "suspicious" logins blocked automatically, etc, etc. I can also create single-use passwords for insecure devices (such as a youtube password just for my apple TV). Not to mention…
Do you really believe people use gmail because of its brand?
Yes. Most definitely. I don't use Gmail and I recently had a discussion with my coworkers about Gmail. When I asked why they use it one person said, "because it's Google" and another said, "What else would I use? Yahoo or Hotmail? Hahahah". A third person responded by saying , "it's just easy because it's Google so it connects to everything else from them."
Re: Why ProtonMail is more secure than Gmail
#244Earlier quoted context omitted.
Not much. It's as bad now as it was a decade ago.
In other words, about as good as gmail but with better control over false positives.
For me, Gmail solves the spam problem. I don't even remember the last time I've had a false positive or a piece of spam that made it to my inbox.
My entire family uses Gmail (our domain is hosted via Google Apps) and as far as I know, it's been very close to perfect for all of us.
Re: Why ProtonMail is more secure than Gmail
#245Threat model, threat model, threat model. There are some people for whom "The government is literally after me, personally" is a valid threat model. There are some people for whom "Google employees with privileged access to Gmail are conspiring to be after me, personally" (one assumes there's a two-person rule for access to individual inboxes or deploying code that scans inboxes) is also a valid threat model. However…
> "I don't want to lose access to my email" (remember that availability is a part of security!). Really? You've heard just as many stories of unexpected Google account closures as I have. I'm quite confident ProtonMail just don't do that. And if they did, you'd have a much more credible chance of talking to a human and rectifying the situation.
That is a pretty good counterargument, and I do think that you should count that risk when evaluating Google's security.
But I think there are lots of other options besides ProtonMail that will do the same. (I pay $50/year for Pobox.com, personally, and vaguely feel like paying a bit of money for my email instead of relying on a free service is worthwhile.)
Re: Why ProtonMail is more secure than Gmail
#246I run bandgap.io off of protonmail. I have had no problems with deliverability, have had great interactions with customer support, and enjoy using the product. After email hack after hack, I just couldn't see how I could ethically store my own users support emails unless they were end-to-end encrypted.
Potential improvements: Searching the inbox isn't great, and I'd like to reduce my attack surface by moving my transactional email from sendgrid to protonmail (not yet supported). Also, it might make sense for protonmail to become an OAuth provider-I'd be willing to support it on bandgap.io
Re: Why ProtonMail is more secure than Gmail
#247Earlier quoted context omitted.
Just watch how I get down voted here. Tells you a lot about the culture here.
A new account introducing a very loaded topic that has been discussed over and over again as a tangent doesn't stand much chance. Going after other commenters because of their presumed nationality really doesn't help.
Indeed, and the shock value is necessary given the low quality anti West garbage emanating from the Russia * * camp.
My assertion is that HN has been overtaken by intelligent / unethical / ostensibly respectful trolls. I know a thing or two about this; such behavior used to occur only on Reddit. Why does Snowden exist as a public figure? I have evidence. No I’m not sharing it now.
Topic remains valid. Humanity can’t even agree on what kinds of privacy and for whom are best for society. Conversation hasn’t even occurred yet.
Witness how my comment was cleaned up to be respectful, leaving only the relevant parts, only to end up downvoted into the ether. It would be nice if a moderator could unflag my original comment since it’s relevant, as another commenter pointed out.
Re: Why ProtonMail is more secure than Gmail
#248Earlier quoted context omitted.
It can be simplified to: Gmail + 0$ per month = zero privacy for you and anyone who emails you, plus Uncle Sam has full access to your life. Protonmail + 4$ per month = you will never see ads for a like the one you just bought, plus you will be driving Uncle Sam crazy!
Uncle Sam can root your machine. If Uncle Sam is the threat vector you're better off using pen and paper.
100% correct. Even with fully patched software/OS/hardware/drivers/firmware we are regularly 'surprised' by a number of 0-day vulns that has been around for 1-2-5-10 years and 'suddenly' we discover it/them.
Putting my tinfoil hat on, I'd say that they got a new-improved way to get in, and they patch the old one because now the 'others' got whiff of this (e.g. shadowbrokers) and are about to start abusing it themselves :)
Re: Why ProtonMail is more secure than Gmail
#249Earlier quoted context omitted.
> They're for people like you and me to reclaim a semblance of privacy, and they work even with "Uncle Sam" as the threat model in a limited, dragnet surveillance sense. They don't work, because the US government's modus operandi is compromising machines or forcing users to provide access to their encrypted data. It's unclear to me why, if you take as premise a government capable of forcing one of the most valuable o…
"Put another way, I find the concept of a government willing to force Google to give up data but unwilling to use operational vulnerabilities to achieve the same thing to be contrived - how is this not just an arbitrary line in the sand?" In the US we have a constitution the prohibits searches of our papers without a warrant signed by a judge. It might be out of fashion is some circles, but the rule of law and not ju…
"willing to force Google to give up data"
first they issued a gag order, and then they came for the gold
"use operational vulnerabilities" am I the only one who strongly believes that Micro$oft is in bed with every 3-leter-agency in haning out backdoors/vulns for the last 20 years?
Re: Why ProtonMail is more secure than Gmail
#250Web based encryption. Pointless. If you trust them enough not to send you bad Javascript, you trust them not to read your emails. You trust them with your private keys. If you trust them with all that why even encrypt the mail client side?
I understand your point of view, but these are different levels of trust. You can audit the javascript they are sending you and (potentially) notice it is a ruse. If they are reading your email after you send it to their server though you have no way of knowing.