Re:ProtonMail Now Supports Bitcoin Payments
by tonyztan on Thursday August 17, 2017 @02:57AM
(#15034364)
It looks like ProtonMail released new account management features just a few weeks ago, including the capability for "organization admins to access the emails of other organization users" while still preserving end-to-end encryption.
Source: https://protonmail.com/blog/encrypted-email-for-organization...
Re:ProtonMail Now Supports Bitcoin Payments
by ComodoHacker on Thursday August 17, 2017 @08:19AM
(#15036016)
>while all organization accounts are end-to-end encrypted, it is still possible for organization admins to access the emails of other organization users. Thus, organizational oversight and management is still possible, even with end-to-end encryption. Furthermore, administrative read permissions are also granted or revoked automatically when admin users are created or demoted.
I wonder how can they provide this without either storing encryption keys on their servers or reencrypting (client-side!) all email during such events.
Re:ProtonMail Now Supports Bitcoin Payments
by bartbutler on Thursday August 17, 2017 @12:43PM
(#15038367)
It's a key escrow system. The admins hold a copy of the user's key, and promoting a new admin involves giving access to this key.
Re:ProtonMail Now Supports Bitcoin Payments
by ComodoHacker on Thursday August 17, 2017 @03:17PM
(#15039934)
So where is this copy stored?
Re:ProtonMail Now Supports Bitcoin Payments
by ThePhysicist on Thursday August 17, 2017 @03:57PM
(#15040290)
Interesting! You could probably do it by using the key of an existing admin to decrypt the escrow key and then reencrypt it with the public key of the new admin, all client-side.
Re:ProtonMail Now Supports Bitcoin Payments
by ThePhysicist on Thursday August 17, 2017 @03:59PM
(#15040306)
Very intersting, I might give the solution another go in the future. Still, at this pace it will take them a long time until they are on par with a "normal" e-mail solution (it might be worth the trouble though).
I've switched to Mailbox.org in 2016 and I'm very happy with their product and service: Their system is based on an open-source solution (OpenExchange) so they don't need to reinvent the wheel and can focus on prodiving good hosting and service (which they do). They also have support for 2FA (including hardware tokens like Yubikeys) and recently revamped their management portal, which allows you to easily create and manage e-mail accounts for your employees.