Proton Mail now supports post-quantum encryption, helping protect new encrypted emails against future quantum threats.

top 13 comments

sorted by: hot top controversial new old
[–] 9 points 6 months ago (1 child)

Cool, but there is not such a thing as secure mail communcation, never forget this

  • source
  • hideshow 1 child comment
  • [–] 0 points 6 months ago

    Yeah there is. It's old too and needs no qraphics.

    Furthermore, nothing is absolute except the lack of absolute. It's all about gradients, targets means, barriers and most of it doesn't matter but that doesn't mean what you think it should mean and neither does that.

  • source
  • parent
  • [–] 7 points 6 months ago (9 children)

    Can someone explain what the point is when the email contents are all read by the sender? Everything is already in a database somewhere.

  • source
  • hideshow 9 child comments
  • [–] 15 points 6 months ago* (4 children)

    Well, if the other person uses protonmail, your client encrypts the email content before submitting it, which means protonmail can't read it.

    If they do not use protonmail, well, protonmail can. They apparently store the emails after they have been sent encrypted with a key in your account, so they can't read them afterwards.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 3 points 6 months ago (2 children)

    About 99% of the world doesn't use protonmail. What good does it do if your email is stored unecryptes in the recipient's imbox over on gmail, apple mail, copilot 360, yahoo, yandex, or whatever else?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 6 months ago (2 children)

    I can encrypt a message with your public key, and only you can decrypt it. The db will store the encrypted version.

    For example.

    This is not necessarily what/why they do it, just one example of how asymmetric ciphers can be useful in an email scenario.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 6 months ago (1 child)

    Just about nobody uses that. Your bank, your online store, your doctor, the state, and about everybody except Alice and Bob send you unencrypted mail.

    Encrypting your email once received is like storing your postcards in a safe.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 6 months ago

    It was just an example. Maybe you have your private key locally to access your email, so that if there is a security breach it's impossible for them to release unencrypted emails?

    I mean I don't know why, but there are loads of good examples of why someone would.

  • source
  • parent
  • load more comments (1 reply)
    [–] 3 points 6 months ago* (last edited 6 months ago) (1 child)

    It seems that I can set it from the Android app, not from the web interface.

    Does anybody know what the (potential) repercussions are of enabling PQC? I would hate it if I lost access to some emails this way.

    edit: see this message. The feature is temporarily disabled as some users of Proton Drive for Windows (Tux is still crying..) reported issues with sync after enabling PQC. PQC only applies to new encrypted emails going forward.

  • source
  • hideshow 1 child comment
  • 9 comments in c/privacy@lemmy.ml view that post
    [–] 59 points 6 months ago

    That's positive indeed. After Signal, maybe it's time we all add PQC to our ssh, HTTPS, etc.

    In fact if you are wondering OpenSSL supports PQC since 3.5 the current LTS and Debian stable relies on it https://packages.debian.org/stable/openssl

    So... you might already be PQC-ready. In fact if you also run Debian on your server (or its exposed containers) maybe you connected over HTTPS already in a PQC-ready compliant fashion.

  • source
  • [–] 15 points 6 months ago

    Seems good 🙌

  • source
  • [–] 16 points 6 months ago

    Tuta already had it i believe, and now proton too, lets goo!!

  • source
  • [–] 12 points 6 months ago

    Finally, some good news from proton.

  • source
  • [–] 3 points 6 months ago (2 children)

    What's the consensus about Proton in here?

  • source
  • hideshow 2 child comments
  • [–] 4 points 6 months ago

    Many say its really bad because they are complying with subpoeanas, but email itself is most often not encrypted anyway

    But if youre using your acc for stuff that needs actual opsec, use something else

    I personally prefer fastmail tho

  • source
  • parent
  • [–] 4 points 6 months ago

    I have a paid tier. I like it. Beats the shit outta the big G.

    I pay for it b/c running privacy focused services is not free. I want a world where we have choices besides Big Surveilence Tech. I could get by with the free tier. I pay anyway.

    If you send to other proton addresses, or to other co's with compatible encryption, it can make email E2EE. Otherwise, it's not, like if the other end is on a gmail address or w/e.

    It doesn't 100% solve the probs. But it doesn't do G style spying of your email contents. That's worth supporting to me.

  • source
  • parent
  • [+] -7 points 6 months ago (1 child)

    We’re still pretending like quantum computing is anywhere near functional?

  • source
  • hideshow 1 child comment
  • [–] 24 points 6 months ago

    maybe you don't know but it's not enough to start working on a solution when traditional cryptography has already failed. you have to start much much earlier, to have a solution much earlier. because most things encrypted one way will not be re-encrypted with new tech later, for various reasons.

  • source
  • parent
  • 4 comments in c/protonprivacy@lemmy.world view that post
    [–] 4 points 6 months ago (2 children)

    Is the option not showing up for anyone else?

  • source
  • hideshow 2 child comments
  • [–] -4 points 6 months ago

    Proton Mail's CEO also supports Trump, so that's a no no for me. I've migrated to Mailbox.org

  • source