The private key you import/generate is encrypted clientside with your password (which is also only known clientside, since serverside only sees the salted hash).

Email is inherently insecure and non-private. I don't know exactly what your point is. Protonmail takes steps to improve the situation as much as possible but you still claim that it's better to just use gmail.

The private key you import/generate is encrypted clientside with your password (which is also only known clientside, since serverside only sees the salted hash).

Email is inherently insecure and non-private. I don't know exactly what your point is. Protonmail takes steps to improve the situation as much as possible but you still claim that it's better to just use gmail.

They don't support subject encryption since that would break open pgp compatibility which is essential when mailing other providers.

You can generate your own private keys and import them. They need to be unencrypted when importing because they are re-encrypted with your protonmail account password so that they can be unencrypted automatically when you login. It is a convinience tradeoff so that the user does not need to worry about manually unlocking keys after login.

Both webclient and app are FOSS so this is just easily verifiable. The important thing is you can make sure they don't compromise or sweep your private keys.

The difference is protonmail encrypts it at rest with private keys under your exclusive control.

They can only scan unencrypted emails while they are in-transit (same as any other provider) which they obviously use for spam detection.

The value of protonmail is precisely encryption-at-rest combined with automatic open pgp encryption.

Sorry misunderstood.

Gmail user needs to setup pgp on another client before they can receive pgp email from a proton user.

Tuta users cannot do that as their encryption scheme is not pgp compliant.

.

I'm always dismissive of honeypot claims and prefer to look at a product for what it actually is.

My biggest gripe with it is actually the lack of open pgp support, something proton supports.

Emails are only e2ee between tuta users which is kind of useless tbh.

I'm always dismissive of honeypot claims and prefer to look at a product for what it actually is.

My biggest gripe with it is actually the lack of open pgp support, something proton supports.

Emails are only e2ee between tuta users which is kind of useless tbh.

Yes, GOS is great, but hardened android forks aren't immune to similar 0click vulns used to target those iPhones.

I'd be interested to know how Lockdown Mode would have faired if it had been enabled, considering the payload was pushed through iMessage.

G’day all.. my first post on nostr. Worked in IT for nearly 40yrs. Big fan of decentralisation and privacy. Currently eager to see blockchain technology transition to a mainstream tool, and an avid fan of the book.io project! Decentralised e-books that can be bought and sold, with authors getting ongoing royalties. If you love books, and fed up with current “fauxnership” check them out!

#introductions

GrapheneOS officially recommends Sandboxed Google Play instead. Many FOSS Android apps are also in Google's Play Store but sometimes they are not (like NewPipe). In those cases, you can keep up with updates using RSS.