News for hackers. Stuff that matters.
Re:Ask HN: Best alternative to Gmail? by earenndil on Monday September 24, 2018 @10:56PM (#18063237)
As has been frequently pointed out, they could choose one account and serve that account a different webpage just once, and harvest their password in order to decrypt all their email in perpetuity. This would be a trivial change that would certainly go unnoticed.
Re:Ask HN: Best alternative to Gmail? by snovv_crash on Tuesday September 25, 2018 @02:41AM (#18064120)
I fail to see how this is any worse than any of their competition, which does server side encryption. At least with ProtonMail there is the chance of them being caught serving backdoored client-side pages - with server-side you would never know.

I feel like the hate is a case of people thinking not being perfect is worse than being average or bad.

Re:Ask HN: Best alternative to Gmail? by earenndil on Tuesday September 25, 2018 @01:41PM (#18068586)
If protonmail is billed as a pgp replacement, then people will think it is reasonable to use protonmail's encryption instead of 'offline' encryption, when that's not the case at all.
Re:Ask HN: Best alternative to Gmail? by snovv_crash on Thursday September 27, 2018 @06:36AM (#18083311)
A version of ProtonMail with the application hosted locally, and no auto-updates, would fulfill your requirements I believe.