Online threats to children are real, but the headlong pursuit of age verification that we’re seeing around the world is unacceptable in its approach and far too broad in scope — and we simply can’t afford to get this wrong.
To be clear, parents’ concerns are valid and sincere. Few people would argue that kids should have unfettered access to adult material, to self-harm how-tos, to social media platforms that manipulate them and expose them to abuse.
But it’s the very depth of those worries that is being cynically exploited. Age verification as is currently being proposed in country after country would mean the death of anonymity online.
And we know exactly who stands to gain: The same tech giants who built the privacy nightmare that the internet is today.
He has a vested interest in saying that, but he’s right, and it would be awful
Proton has activists’ identities at stake, of course they’re doing their best to defend them
It’s interesting what people expect of Proton Mail. I’ve used it for a long time but for only one reason really: their revenue stream is my subscription and not ads. I’ve never even given a second thought to all their encryption claims. Even with Proton Mail if I ever wanted to send a “secret” email I’d wrap the content in my own personal keys.
With respect to IP addresses of email logins, I’m surprised they ever claimed they don’t have logs. You’ve always been able to review the IP of a login through the web UI as far as I remember. Was the idea that that was also supposed to be encrypted?
Personally I’m OK with them complying with court orders, but I understand that “the definition of criminal is state defined” and that poses serious issues. It kinda seems like if you want to do something that could be considered criminal at some point in your life by your country you should consider something other than a 3rd party email provider for those messages. Signal would be a step up in that regard if you still wanted to use a third party.
It’s quite mundane actually: people expect what they advertise on their front page.
Their advertising is a stretch at the best of times, and (as seen on my first link) so terrible that it needs to be removed at other times.
Lol, ok, fair.
I guess I see a lot of wiggle room in the marketing speak of their page and I haven’t actually “looked in to” Proton Mail’s claims in a loooong time. So I guess what I really wanted to say is that it’s interesting to me that people take that marketing at face value if they’re actually trying to maintain secrecy. I’ve always just taken it as a given that third party services aren’t particularly good at that, especially as they grow in complexity like Proton has. Signal has been easier for me to believe because of the singular focus and the reputation of the founder in the crypto community; although I guess he’s long gone.
They have to comply with court orders. You can’t run a business and ignore the government and legal system; they will throw the book at you.
Don’t use proton to do anything that could be considered a crime in the EU.
This sounds like something you should take up with Proton’s marketing: “Outside of US and EU jurisdiction”
Which is both correct, but makes them still subject to swiss law, and swiss law enforcement will comply with foreign requests - although it took some serious misrepresenting by the French by citing terrorism laws to get the swiss courts to sign the warrant, forcing proton to log the next IP the user used to log in. Had the user used protons own VPN or TOR to login, the resulting data would have been useless.
If Proton users try to sign up with Tor, they are asked for an email address, which Proton stores and turns over to law enforcement. Your complaint is legitimate, but you are speaking to the choir here, they need to know. At bare minimum, so they don’t get in legal trouble for misrepresentation (although I hope people here presume they have a higher ethical standard than legality)