A secure mail startup founded by CERN and MIT scientists in 2013.
ProtonMail: End-to-end encrypted email
protonmail.ch
ProtonMail: End-to-end encrypted email
1–10 of 51 posts
Re: ProtonMail: End-to-end encrypted email
#2The security details page[1] makes for interesting reading. Hopefully the new norm is 'E2E' encryption. It's actually starting to feel inevitable, and the hopelessness that followed in the wake of the 'Summer of Security' is perhaps evaporating bit by bit, through universal encryption, bit by bit.
-
Re: ProtonMail: End-to-end encrypted email
#3What a great project with what looks like 3 really talented guys. My one gripe is the @protonmail.ch domain requirement.
Re: ProtonMail: End-to-end encrypted email
#4The site uses Google Analytics. Easy to deduce the service's usefulness in a critical situation from there…
Re: ProtonMail: End-to-end encrypted email
#5The site uses Google Analytics. Easy to deduce the service's usefulness in a critical situation from there…
TOR?
EDIT: Just to expand on that a little. For as long as Snowden sports a TOR sticker on his laptop, or until I hear otherwise, I'll continue recommend its use for basic privacy needs. And as mikegioia notes, it is only used on the front page. You could also block the script, failing that!
Re: ProtonMail: End-to-end encrypted email
#6The site uses Google Analytics. Easy to deduce the service's usefulness in a critical situation from there…
It's just their homepage, most of their other pages don't even run javascript: https://protonmail.ch/login.php
Re: ProtonMail: End-to-end encrypted email
#7> "we plan to open-source key parts of our code as well later on."
Great!
Re: ProtonMail: End-to-end encrypted email
#8Anybody know when this is finally opening up for more sign ups??
Re: ProtonMail: End-to-end encrypted email
#9> "we plan to open-source key parts of our code as well later on." Great!
Why not open source all of it? I find it hard to trust a closed service especially after what happened with gmail.
Re: ProtonMail: End-to-end encrypted email
#10The security details page[1] makes for interesting reading. Hopefully the new norm is 'E2E' encryption. It's actually starting to feel inevitable, and the hopelessness that followed in the wake of the 'Summer of Security' is perhaps evaporating bit by bit, through universal encryption, bit by bit. - [1] https://protonmail.ch/pages/security_details.php
> Messages are stored on ProtonMail servers in encrypted format. They are also transmitted in encrypted format between our server and users’ browsers. Messages between ProtonMail users are transmitted in encrypted form completely within our secured server network. Because they never leave our secured environment, there is no possibility to intercept the encrypted messages enroute.
Emphasis mine. That doesn't sound like E2E encryption to me. End to end means it's encrypted user-to-user, not server to user, or user to server to user. It sounds more like they have something slightly more secure than an e-mail service like Gmail, but still very vulnerable to subpoenas, backdoors and so on.