Edit: At least it is if both the sender and recripient uses protonmail. Its open source so you could verify the client to make sure that the contents are encrypted. As for IP address and subject lines tho, that’s up to the Protonmail company to honor your privacy, and just hope they don’t betray you.
Protonmail is definitely more private than google or Microsoft, but you shouldn’t hold 100% trust in any provider. Ultimately your data is still on their hardware and they have control of it. Also, as others have pointed out, both sides need to be secure otherwise all that data is accessible on the other side.
You can mitigate it yourself a bit by hosting your own email server, but I highly recommend against that as its a massive headache to secure and basically every provider will reject your messages anyway.
besides the above, their open support for regime change in China is NOT something a Taiwanese company would do. I live in Taiwan and have worked here for over a decade. Executives here try to keep their head down and just make money. They do not champion any causes.
I have read that blog entry and some of its references. The evidence provided for this strong claim seems to be very weak.
I would not judge anything based on the listed talking points.
Now, knowthing is impossible and such services are sure in the interest of governments around the world. I also want to remind people on the Swiss Crypto AG which sold compromised analog encryption machines for decades.
Even if you have 100% confidence in your own provider, you also need 100% confidence in every other recipients provider, which is basically impossible.
Of course there are alternatives. That’s the cherry on top of this crap pile: only regular non tech folks are affected. Nerds and actual criminals will just run an xmpp or simplex server and not care about the legislation.
just don’t use whatsapp? problem solved!
#returntoemail
Right attitude, wrong solution.
Email is very much not private
Protonmail is
Edit: At least it is if both the sender and recripient uses protonmail. Its open source so you could verify the client to make sure that the contents are encrypted. As for IP address and subject lines tho, that’s up to the Protonmail company to honor your privacy, and just hope they don’t betray you.
Protonmail is definitely more private than google or Microsoft, but you shouldn’t hold 100% trust in any provider. Ultimately your data is still on their hardware and they have control of it. Also, as others have pointed out, both sides need to be secure otherwise all that data is accessible on the other side.
You can mitigate it yourself a bit by hosting your own email server, but I highly recommend against that as its a massive headache to secure and basically every provider will reject your messages anyway.
protonmail is CIA https://encryp.ch/blog/disturbing-facts-about-protonmail/
besides the above, their open support for regime change in China is NOT something a Taiwanese company would do. I live in Taiwan and have worked here for over a decade. Executives here try to keep their head down and just make money. They do not champion any causes.
I have read that blog entry and some of its references. The evidence provided for this strong claim seems to be very weak. I would not judge anything based on the listed talking points. Now, knowthing is impossible and such services are sure in the interest of governments around the world. I also want to remind people on the Swiss Crypto AG which sold compromised analog encryption machines for decades.
That user also claims Signal and Matrix are CIA and refuses to provide sources for those claims
Even if you have 100% confidence in your own provider, you also need 100% confidence in every other recipients provider, which is basically impossible.
The body of the messages arguably are, but the metadata is not, and that includes the subject line and the sender & recipient addresses.
Then go tell that to all of your WhatsApp contacts, people won’t change apps.
I’m not touching an app owned by Meta. If people want to message me, they can use Signal.
Turns out, this policy has weeded out lots of useless conversations from my life. So, I see it as a win.
I have zero such contacts. For the moment, I tolerate Signal. When it falls I’ll switch to self-hosted Matrix.
but that’s the beaury of email! people don’t need to be on the same app to communicate with each other!
that arbitrary walled-off garden of whatsapp doesn’t hamper anyone here!
Of course there are alternatives, that’s not the main problem, it’s the adoption by people not familiar or interested in tech.
https://activitypub.rocks/
eMail is affected as well. There is no alternative. And mails are not private if not all participants use end to end encryption
Of course there are alternatives. That’s the cherry on top of this crap pile: only regular non tech folks are affected. Nerds and actual criminals will just run an xmpp or simplex server and not care about the legislation.
Stop fear mongering, of course there is alternatives
Email is unencrypted.
Not if you use pgp
Or Proton/Tuta.
It will not E2EE for you.