undefined | Better HN

0 pointskookiburra1y ago0 comments

I agree, though self hosting can be too hard for everyday non tech users. I think the fact that Proton exists, regardless of all their issues, is still a good thing and a move in the right direction

0 comments

Over2Chars1y ago

I am a fan of proton, but we should always be ready for the bad news that forces us into another provider or self-hosting. Sooner or later it always happens.

Like lavabit or anon-penet.fi, cases where things go tits up for non-provider related reasons.

https://en.wikipedia.org/wiki/Lavabit

https://en.wikipedia.org/wiki/Penet_remailer

kookiburraOP1y ago

By the way, I wrote this article just last week - https://ownerofhappy.org/encrypted-email-bad

I actually agree, and personally I don't love how they advertise such foolproof security. It's dangerous especially when their non technical users don't understand the consequences. I've had multiple friends using Proton who think it's 100% private even when emailing a gmail user.

Over2Chars1y ago

I remember reading someone talking about how Proton couldn't be that secure (ultimately) because they relied on a javascript front end.

I recalled this when I read some crypto security efforts were focused on removing any javascript dependencies. I was like... hmmmm.....

j / k navigate · click thread line to collapse

0 comments

Over2Chars1y ago

I am a fan of proton, but we should always be ready for the bad news that forces us into another provider or self-hosting. Sooner or later it always happens.

Like lavabit or anon-penet.fi, cases where things go tits up for non-provider related reasons.

https://en.wikipedia.org/wiki/Lavabit

https://en.wikipedia.org/wiki/Penet_remailer

kookiburraOP1y ago

By the way, I wrote this article just last week - https://ownerofhappy.org/encrypted-email-bad

Over2Chars1y ago

I remember reading someone talking about how Proton couldn't be that secure (ultimately) because they relied on a javascript front end.

I recalled this when I read some crypto security efforts were focused on removing any javascript dependencies. I was like... hmmmm.....

j / k navigate · click thread line to collapse