Re:Why Did ProtonMail Vanish from Google Search Results? (2016)
by pzduniak on Thursday November 30, 2017 @07:41AM
(#15815269)
> you'd still be protected by PGP.
You wouldn't, PGP is verified by code that can be MITM'd if the traffic is spoofed.
Re:Why Did ProtonMail Vanish from Google Search Results? (2016)
by rocqua on Thursday November 30, 2017 @07:29PM
(#15820972)
Ah yes, you are right. That darn server-provided client-side code without any decent means of verification really wrecks a lot of security guarantees.
Re:Why Did ProtonMail Vanish from Google Search Results? (2016)
by caio1982 on Thursday November 30, 2017 @10:01AM
(#15816195)
Where did you read I proposed any scheme at all, dude? Saying something looks like a PR shield is a problem now?
Re:Why Did ProtonMail Vanish from Google Search Results? (2016)
by rocqua on Thursday November 30, 2017 @07:33PM
(#15820990)
Is something still a PR shield against accusations if it is correct? I'd argue an actual rebuttal to the accusations is more than a PR shield. As described in my response, I consider the article to be a rebuttal of the accusations presuming they are not lying. Thus I conclude that it is not a PR shield. Notably, I'd say that outright lying about facts isn't a PR shield.
Heck, even if somehow radware (the BGP-based DDoS proxy they use) had access to protonmails private key or had minted their own SSL cert for protonmail, you'd still be protected by PGP.
For outgoing mail, they don't use radware so even if you were to send plaintext emails to a mailserver that doesn't support SSL encryption, radware still wouldn't be able to read that.
Unless the linked statement is just a lie, their DDoS protection service is not able to MitM them. Your proposed scheme seems a lot more convoluted than protonmail just giving access to the Israeli government. Similarly, it seems a lot more conspicuous.
If you don't want to use them because it indirectly supports an Israeli company, that makes sense, but their DDoS prevention scheme as outlined does not harm privacy in any way.