Here's the thing about Proton Mail:

[em0nm4stodon@infosec.exchange]

Here's the thing about Proton Mail:

With Proton Mail, the content of your email is fully end-to-end encrypted and inaccessible to service providers IF (and only if) you are communicating with another Proton Mail account, or you have set up a PGP key exchange otherwise.

The metadata of your email, however, isn't end-to-end encrypted. It is accessible in plain text to Proton. This includes:

• Your payment information
• The subject line of your emails
• Your IP address(es), which can reveal your location
• The email addresses you have communicated with
• The time you have sent and received emails

If Proton is legally forced to provide this information to law enforcement, they will. They have to.

If your threat model makes it that it's dangerous for you when this metadata is shared, you need to use another, more private, method of communication.

#ProtonMail #Privacy

[frank@social.fraxoweb.com]

@Em0nM4stodon Yeah, but can you even send/receive emails without metadatas?

[em0nm4stodon@infosec.exchange]

@frank No

[frank@social.fraxoweb.com]

@Em0nM4stodon When they invented emails, it wasn't designed to be private.

I guess we would need a new communication technology that is.