News for hackers. Stuff that matters.
Re:More people are searching for an inbox that protects thei... by criddell on Wednesday September 09, 2020 @12:30PM (#24422717)
Services like Proton do a good job of keeping the body of the email private, but is there anything they can do about protecting the header information?

Metadata can reveal a great deal.

Re:More people are searching for an inbox that protects thei... by Drip33 on Wednesday September 09, 2020 @12:34PM (#24422770)
There's a lot they can do, but then it makes it impossible to search your inbox for old emails by subject, from, to etc fields.

You can reduce what an adversary sees by not including anything useful in the subject line and the only thing you can't protect is who you're speaking to and when.

Re:More people are searching for an inbox that protects thei... by gruez on Wednesday September 09, 2020 @12:46PM (#24422894)
The third party doctrine[1] allows the government to access your call records (and other metadata) without a warrant, but I don't think anyone's fine with that.

[1] https://en.wikipedia.org/wiki/Smith_v._Maryland

Re:More people are searching for an inbox that protects thei... by GuB-42 on Wednesday September 09, 2020 @12:49PM (#24422921)
Security / convenience tradeoff.

Not being able to access the email body already makes full text search impossible, among other things. It is one tradeoff for using Protonmail instead of, say, Gmail.

Encrypting header data would make most operations impossible unless you download your entire inbox first.

Re:More people are searching for an inbox that protects thei... by upofadown on Wednesday September 09, 2020 @12:50PM (#24422935)
STARTLS usage is over 90% these days. So the email server(s) get your metadata but passive network observers do not.

So the providers can work to get that to 100% and mandatory to foil active attacks.