Proton Mail now supports post-quantum encryption.

[jo69@mastodon.social]

@protonprivacy why so complicatet? Opt in!? Tuta made it for all automatically!

[me@joshuastrobl.social]

@BryanGreyson @protonprivacy At the very least, one of my devices is on Proton Mail 7.9.5 (16929) and another is on 7.9.6 (16983) on Android. Both continue to work after enabling PQC.

[bryangreyson@social.tchncs.de]

@me

Ah, alrighty, thank you!
Would still be a good info for the blog and/or popup, @protonprivacy.

[nemo@mas.to]

@protonprivacy Awesome big thanks ️

[utf_7@mastodon.social]

@protonprivacy i am too dumb for this.

i mean i understand why rsa is secure atm because multiplying numbers is more easy than factorizing a product.

but hell, is there an eli5 on post quantum star trek what dafuq?!

[machine@social.tchncs.de]

@protonprivacy

Well done and thank you
Hopefully you'll be rolling out PQC for all other Proton services in the near-ish future.

[dazo@infosec.exchange]

@jo69

Based on years of experience with @protonprivacy ... they take baby steps, to ensure nothing breaks. But they also give access to new features to users earlier as well. So if you want to join the fun earlier, you can opt-in.

Visionary users (not an available plan any more) gets access much earlier as well, and can often opt-in there too. When Proton opens up for opt-in at this stage, more publicly, they've decided to expand the scope further.

I expect that PQC will be enabled by default in 6-12 months - and then after some more time (2-5 years?) you can no longer create non-PQC keys at all manually.

Proton have far over 100 million users to care for. If something broke badly in the first transition, it would end up very bad for both Proton and all their users. This way they do more a controlled way of enabling new features while reducing the risks as well as lowering the consequences if something bad happens.

While I understand the annoyance of enabling it manually now, it the very end I'm pretty sure you'll see it will become the default with time.

[nemo@mas.to]

@ml #goodnews Proton goes quantum haaha ️

[ml@social.mitexleo.one]

@nemo Yeah, already enabled!

[nemo@mas.to]

@ml Great!

[kayo77@infosec.exchange]

@protonprivacy when ProtonMail will be FBI proof?

[hacknorris@mstdn.social]

@protonprivacy FINALLY..

[hacknorris@mstdn.social]

@protonprivacy edit: nope

[ralph@hear-me.social]

@protonprivacy

#alttext

Mail update
Post-Quantum Cryptography
Image of a half circle with a corona of little squares in indigo and white.

[ralph@hear-me.social]

@hacknorris @protonprivacy

#alttext

Paccount.proton.me
Encryption and keys
Image of a four piece jigsaw puzzle with one piece separate and askew.
Something went wrong
Please refresh the page or try again later.

[t0maz@floss.social]

@protonprivacy So which exactly iOS and Android apps version is adding support of this new feature?

[songbird@owo.cafe]

@dazo @jo69 @protonprivacy also, in this specific case, enabling post-quantum also disables your previous recovery phrase.

Enabling it by default might make a user lose access to their account, if they don’t generate a new one after switching it. Which is less probable if it’s automatic; easier to ignore the warnings, etc.

[ajcxz0@fosstodon.org]

@protonprivacy

From "How to enable post-quantum protection in Proton Mail"[1]

> Enable post-quantum protection
> 1. Sign in to account.proton.me and open your account settings.
> 2. Select Encryption and keys from the sidebar.
> 3. Under Post-quantum protection, click Enable post-quantum protection.

Where is the Post-quantum protection section?

[1] https://proton.me/support/mail-post-quantum-protection

[neverpanic@chaos.social]

@utf_7 @protonprivacy we know how to break apart multiplied numbers (RSA) quickly since the 90s, but so far the hardware to do that was theoretical. Recently multiple independent groups have made progress on improving the algorithm and improving the hardware. We're probably still years away, but transitions like these take decades, and we want data to be secure for at least a decade, too, so it is time to act.

[hacknorris@mstdn.social]

@AJCxZ0 yeah, on laptop i have same thing in site...