News for hackers. Stuff that matters.
Re:Clarifications regarding arrest of climate activist by kijin on Monday September 06, 2021 @11:45AM (#28434824)
You can use ProtonMail Bridge with your own mail client to remove the dependency on the ever-changing webapp. I'm not sure if it's possible to build Bridge from source instead of blindly trusting the binaries they offer, though.
Re:Clarifications regarding arrest of climate activist by sneak on Monday September 06, 2021 @05:39PM (#28438398)
You also can't use your own mailbox keys loaded into bridge - the only mailbox keys that can be used seem to be generated inside their app (which from a security standpoint is the same as generated on their server).
Re:Clarifications regarding arrest of climate activist by DocTomoe on Monday September 06, 2021 @11:50AM (#28434882)
when you do, be aware that locally encrypting mail and sending it over the bridge will not work.
Re:Clarifications regarding arrest of climate activist by neltnerb on Monday September 06, 2021 @02:31PM (#28436576)
And that the bridge exposes your IP address if you aren't using Tor.

This isn't a complaint, it should be pretty obvious. Though it'd be neat if they integrated Tor into the Bridge such that they cannot tell where the connection is coming from, that would be cool.

Not that this is really part of my threat model anyway, I don't expect protonmail to be anonymous, merely more private in certain situations.

I posted this as an idea if anyone wants to vote it up, they seem to be pretty responsive to end users compared to other services (at least the paying ones).

https://protonmail.uservoice.com/forums/284483-protonmail/su...