> the author prefers dubious advantages to real improved security
Encrypting the data transfer doesn’t improve any of the HTML email security issues. So I fail to see how that would be “real improved security”.
But I do share the authors sentiment on the failure to not using open standards of both Protonmail and Tutanota. So maybe I’m biased.
The data in a protonmail account is encrypted with your own key. How is protonmail supposed to encrypt an email if they receive it unencrypted over SMTP?
There are various ways. One would be to use standard imap and decrypt the message on the client. Their bridge sort of does that but with proprietary protocol.
Either way, that has absolutely nothing to do with the security issues of html email. Eg phishing and tracking still works when you decrypt the message and open it.
I'm on mobile so I can't give you an adequte response, but I can link you to a previous commment I wrote on the subject...
Or I would, but pasting seems to be broken on my phone as well. If anyone can search HN for "Sir_Cmpwn Protonmail" and link the relevant comment I'd appreciate it very much.
This one, I believe: https://news.ycombinator.com/item?id=18008123
Thank you!
Re:Use plaintext email
by ignaloidas on Wednesday July 24, 2019 @08:16AM
(#20514379)
For Protonmail: maybe using PGP and sending over TLS?? Protonmail bridge basically does this, just over a proprietary protocol.
It sounds like the author prefers dubious advantages to real improved security.
That's quite ridiculous considering that according to him HTML emails are:
>"... a security nightmare, are mostly used for advertising to you and tracking you, are less accessible for many users, and don't offer anything especially great for it."