they scrubed there no ip logs policy years ago

all 33 comments

sorted by: hot top controversial new old
[–] 54 points 2 years ago

Tldr: Yes, still secure and private.

  • source
  • [–] 50 points 2 years ago (3 children)

    What are they supposed to do as an internationally known and used company? Reject legal proceedings and ignore official national laws?

  • source
  • hideshow 6 child comments
  • [–] 41 points 2 years ago (1 child)

    I mean, the answer to that is clearly they should structure their service to store the absolute least possible personal information needed to allow the service to function so that when a legitimate law enforcement agency comes knocking they can honestly say they don't have much.

    Which... appears to be pretty much what they do.

    I agree with you. Losing the protection of a right -- even one as fundamental as privacy -- is by definition not a violation so long as that happens through due process. Now we can certainly talk a lot about what level of process is due, and I'm sure it will be basically unanimous that current standards around the world are FAR too accommodating to law enforcement, but at least in principle a warrant justifies the invasion of privacy. That's what the warrant is for.

    This story kind of makes me want to switch all my stuff to ProtonMail.

  • source
  • parent
  • hideshow 2 child comments
  • [+] -8 points 2 years ago (2 children)
  • [–] 16 points 2 years ago*

    And what advertising is that precisely? No data ( emails, passwords, drive files ) were shared with the authorities. So the data is still secure and private.

    As far as I can tell they haven't falsely advertised.

    I'd give them bonus points for transparency ( publishing how many court ordered subpoenas they receive on a yearly basis ) compared to other companies that don't.

    Other companies which are prominent in the privacy/secure email scene face similar issues.

    E.g.: https://www.internetsociety.org/blog/2021/03/enough-is-enough-what-happens-when-law-enforcement-bends-laws-to-access-data/

    I think you're mixing up anonymity with privacy. It can definitely be more anonymous, but you would need to take steps for that yourself ( Tor, VPN, ... ).

  • source
  • parent
  • [–] 11 points 2 years ago*

    How though? They advertsize themselves as the privacy-conscious Google alternative which they very much are. Idk if I've just not been exposed to (their) ads, but do they make all kinds of unreasonable claims like being outside of all legal jurisdiction?

  • source
  • parent
  • [–] 27 points 2 years ago (3 children)

    Idk for most people, but the reason I use proton mail is to avoid google parsing everything I receive to send me ads. I "have nothing to hide" on a legal pov, I'm not a criminal, the worst offence I do is like Jay walking or crossing at a red light on foot when there is no one at midnight. I don't use proton services to protect myself from the law (or in other words to avoid the consequences of my acts), I just want to be a customer instead of a product.

  • source
  • hideshow 6 child comments
  • [–] 9 points 2 years ago

    This is exactly why I use Proton as well. I'm not worried about law enforcement, I just want Google and other big tech's tentacles out of my fucking business. I don't want to be advertised to.

  • source
  • parent
  • [–] 7 points 2 years ago

    YOU JAY WALK!?

    You are a disgrace!!! How do you sleep with yourself?

    DISGUSTING!

    /s

    But that’s a really great point. It’s easy to thinking of your threat model as all or nothing. And you are right. I’m not hiding from the law. I’m hiding from advertisers. If the government acquires my information then it was a mistake on their part as there is nothing there to find other than emails from my bank.

  • source
  • parent
  • [–] 26 points 2 years ago (1 child)

    My threat model is not LE, its google, facebook, etc. If me using privacy services happens to make LE's job harder well thats just the cherry on top.

  • source
  • hideshow 2 child comments
  • [–] 21 points 2 years ago (1 child)

    The article is actually pretty balanced. Yes Proton is secure and private, but if you're hiding from law enforcement, don't expect a third party to take the fall for you.

  • source
  • hideshow 2 child comments
  • [–] 13 points 2 years ago* (1 child)

    My understanding is that the email is encrypted still so… they hand over the encrypted data which might be useless.

    (CEO did a podcast this week for a Linux podcast)

  • source
  • hideshow 2 child comments
  • [–] 13 points 2 years ago (2 children)

    Well I'm a customer and I think it's fine if the requests are legitimate. The question then of course is what is legitimate.

  • source
  • hideshow 4 child comments
  • [–] 2 points 2 years ago (1 child)

    Tangentially related information... this post led me to check on how many data requests Google receives from law enforcement (internationally). The answer is about 420,000 requests in 2023 (if you take the most recent data from Q1 and Q2 2023 and double it).

    Ref: https://www.statista.com/statistics/273501/global-data-requests-from-google-by-federal-agencies-and-governments/

  • source
  • hideshow 2 child comments
  • [–] 1 point 2 years ago (1 child)

    The question then becomes, how much more users does google have than proton

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 2 years ago

    I did think about this but a mail service like Proton is going to attract proportionately more attention from the authorities because its users are going to be made up primarily of people who are more privacy/security focused (perhaps with something to hide) so having user numbers is not going to be that helpful in terms of doing a comparison. Also Google has a bit of a fake account problem, and a lot of people have a Google account only to enable them to access Google services (Android, Google Docs), and some people have multiple Google accounts.

  • source
  • parent
  • [–] 0 points 2 years ago (1 child)

    I suppose they now keep logs of their VPN service too then.

  • source
  • hideshow 2 child comments
  • [–] 4 points 2 years ago* (1 child)

    Swiss law doesnt allow complying with VPN services afaik.

    ProtonVPN and ProtonMail are completely seperate too.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 years ago* (1 child)

    Do you mean the law doesn't allow forcing the VPN service to comply with VPN log requests by authorities?

    And what do you mean by "completely separate"?

    Proton VPN... is operated by the Swiss company Proton AG, the company behind the email service Proton Mail.

    https://en.wikipedia.org/wiki/Proton_VPN

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 2 years ago

    ProtonMail was not even against cooperation with the RuSSian terrorist government, and this post was still downvoted, funny.

    Have you already decided whether privacy is important to you or not?

  • source