Show HN: End-to-end encrypted email, based in Switzerland

Re:Show HN: End-to-end encrypted email, based in Switzerland by rdl on Friday May 16, 2014 @04:13PM (#7757664)

You can serve different JS to "special" users once. If you're smart, you run checks "for the security of the browser environment" first to make sure it's something unlikely to contain debugging capabilities, e.g. an unmodified iOS device.

The site even helpfully asks you to identify yourself with ANOTHER username and passphrase first, making it even safer for the attacker.

[ Parent | on HN ]

Re:Show HN: End-to-end encrypted email, based in Switzerland by fareastcoast on Friday May 16, 2014 @04:36PM (#7757758)

An attacker would have to (1) Gain access to the server in Switzerland (without the admins noticing) or (2) Break the SSL and execute a MITM attack.

It seems ProtonMail actively scans the code on the backend for unauthorized changes. It's not 100% secure against a very determined attacker (NSA), but for the citizen that wants more privacy without the hassle of PGP, it's pretty good until we can replace SMTP.

[ Parent | on HN ]

Re:Show HN: End-to-end encrypted email, based in Switzerland by tptacek on Friday May 16, 2014 @04:43PM (#7757803)

The same thing is true of a mail server in Switzerland that uses TLS and doesn't use clientside encryption.

[ Parent | on HN ]

Re:Show HN: End-to-end encrypted email, based in Switzerland by rdl on Friday May 16, 2014 @06:06PM (#7758207)

Honestly if it is a good usability service based in Switzerland with no special sauce, but well run, I would like it. The only problem I have is that the security asserted doesn't match the reality of a decent threat model.

You can go pretty far with policy and law alone.

[ Parent | on HN ]

Re:Show HN: End-to-end encrypted email, based in Switzerland by sp332 on Friday May 16, 2014 @04:38PM (#7757775)

Or (0) Be an admin.

[ Parent | on HN ]