On its 10th anniversary, Signal’s president wants to remind you that the world’s most secure communications platform is a nonprofit. It’s free. It doesn’t track you or serve you ads. It pays its engineers very well. And it’s a go-to app for hundreds of millions of people.
Not OP, I've heard criticism of their recent Duo subscription and their bitcoin wallet.
I use Proton services and my biggest gripe is their mediocre Linux VPN app. No binaries to download/Flatpak, advertised port-forwarding isn't fully implemented and requires playing around in a terminal, and UI feels less polished than it's Windows counterpart.
There's a community made Flatpak of ProtonVPN though, in case it helps anyone
Honestly, I just use wg-quick to connect to VPNs, and I tested out ProtonVPN and it worked fine with it. I even set up my router to connect to ProtonVPN, so I could have a wifi network that's always connected to their VPN.
But I'd really rather not have the same company host my VPN, email, and other stuff, I'd prefer to separate them a bit so no one company has a lot of my data. And something like a VPN really doesn't benefit from bundling anyway, unless it's bundled with a browser or something a la Mozilla VPN.
It's probably tight enough for your needs. Unless you live in Switzerland or are breaking Swiss law, they'd need a really good reason to send your data anywhere.
That said, I use Tuta. They have a similar source model (open client, closed server) and are based in Germany, but since they're an underdog, they have a bit more value and lower costs. I pay €3 and get 3 custom domains and 15 aliases, whereas w/ Proton I pay $4 and get just 1 custom domain and 10 aliases; I can also add people to my plan for €3, instead of upgrading to a Duo for $15 or family for $24. If Proton matched Tuta's features, I'd probably pay slightly more for the better UX, but I use those features so I'm very hesitant to give that up. I don't intend to use their VPN or other products, so I'm very much not interested in their higher tiers.
I do wish their server code was open source and self-hostable. I'd love to use my own storage, but still use their spam filtering and whatnot.
It's probably tight enough for your needs. Unless you live in Switzerland or are breaking Swiss law, they'd need a really good reason to send your data anywhere.
Correct. They comply with court orders, its a business. People still need to be secure in how they use it, which that guy wasnt. So if you're attempting to evade the government, use a vpn. All your data is encrypted, where you access it from and your billing information cannot be.
They do have the capability to not have the data requested. If they are not required by law(and it seems they aren't), why store any data? They may have to provide data of the sessions that are active right now but it's unlikely.
True but the guy was the one at fault and Proton had to comply. The French Activist was using ProtonMail e-mail for bad usages which is what it boiled down to. You left out the part where they complied with Swiss government yes but they didn't with the French authorities.
Yet it still comes down to people's own responsibility. But people love to throw that out the window and expect everything to protect them when they get up in shit.
The email service says it was unable to appeal a Swiss court’s demand to log the IP address of a French climate advocate.
This weekend, news broke that the anonymous email service ProtonMail turned over a French climate activist’s IP address and browser fingerprint to Swiss authorities. The move seemed to contradict the company's own privacy-focused policies, which as recently as last week stated, "By default, we do not keep any IP logs which can be linked to your anonymous email account."
I see that as offering services that people clearly use and value, and that the bills have to be paid somehow. So as long as proton can deliver the privacy and security features it promises, I personally don’t see anything wrong with providing an alternative when the only other options are built on monetizing your data.
I often figure it's google bias and / or people trying to impose their threat models on other people.
Been using proton for quite a while with a few custom domains and am impressed with the service to price of their offerings.
We can one off use cases with any vendor, but at the end of the day, they offer a more secure out of the box experience than just about any other platform out there. If someone is doing illicit shit and gets popped, it's not on the service provider to provide air cover for them. Improve your opsec or self host.
The one and only critique I'll give to Proton is how they have it where you can have Google e-mails forwarded to you to your Proton address.
And it's like...why? The entire reason you're going to ProtonMail is to escape Google. Why the hell would you want Google to try and pry into your Proton usage when all you want is to distance yourself from them?
You set up the forwarding in google, not proton. You mark the forwarded emails in your proton mailbox. You forward the emails to your proton account until you changed all the sources that you care about from your google to your proton mailbox. Then you turn off forwarding.
Google never gets any more data from you except your protonmail address.
It's really nice for the transition period. I personally forward my email to Tuta, which lets me slowly convert my services to my new address. I have my most important ones switched over now, but I had to switch dozens over (I would do 3-5 at a time, which was a pain).
I'll probably leave my gmail forwarding to my Tuta account, just because there's no way I'm going to go though every single service I have ever used and switch it over, and inevitably some contact will continue using my old email.
As far as Google goes, all it knows is that it's getting less and less emails, and that what remains is being forwarded to <email>@tuta.com. But that's not my main email address though, it's just the one I set the account up with. I actually use <name>@<custom domain>, and I have a bunch of aliases configured for each type of account (e.g. <name>-banking@<custom domain> for my bank accounts, <name>-bills@<custom domain> for utilities and whatnot, etc). But that's still not my actual, personal email, which is <name>@<different custom domain>, and I only give that one to my family and friends.
If I can convince my SO to switch, I'll give them an account at custom domain 2 and tell them to only use it for personal contacts, and to have everything else go through their old gmail or a Tuta alias. If I ever decide to switch to Proton, I'd have to transition all of those custom domain 1 emails to some proton aliases (unless I pay for the higher tier), which would be a pain, especially since the main reason I use these custom domains is to make it easier to switch services (e.g. just point my DNS records to the new host).
That's not everyone's privacy posture. Some people use Proton to hide, some people use it to secure, some for both. If your goal is to secure, google's antiprivacy isn't against that.