Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

this is inaccurate, no one can't fetch the the body of emails.


I have a protonmail account. When I log in to the interface, I see the body of emails, without providing any key on the client (not that it'd help since the client is a generic browser running their website code). This implies the process exists to recover the body of my emails. Also, I type in the password in their web UI in cleartext - there's no other way to gain access - which means they also have access to my cleartext password and could be forced to disclose it to the third parties. So unless you provide some contrary evidence, your assertion is false.


Unless you use end-to-end encryption (like PGP) then that's not true.


PM mails are encrypted with PGP at rest, as is metadata. The police can request to log incoming and outgoing mail metadata if available but not retroactively.


Right, if you trust that they only store the encrypted version. But the comment at the top of the thread is talking about logging once the police are interested in you. At that point they can log anything you send to them (or somebody else sends to them), including plaintext emails.


Yes, but it's hardly surprising that criminal investigations tend to evaporate some privacy standards very quickly. ProtonMail doesn't want to get hit by the stick too.

And before anyone suggests that PM should have been more "open/honest" about this, I disagree, the fact that a criminal investigation will do this is well known and mentioning it would be akin to asking your bank to plaster "if the world economy implodes, we might not be able to pay out your account" all over their frontpages.


Wait what's stopping them from logging the body of email too then?


The body is metadata too? It might be encrypted as well, making that effort less effective.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: