News for hackers. Stuff that matters.

kookiburra

Re:I failed moving my Google calendar to Proton on Wednesday January 15, 2025 @04:00AM (#42708861)
By the way, I wrote this article just last week - https://ownerofhappy.org/encrypted-email-bad

I actually agree, and personally I don't love how they advertise such foolproof security. It's dangerous especially when their non technical users don't understand the consequences. I've had multiple friends using Proton who think it's 100% private even when emailing a gmail user.

Re:I failed moving my Google calendar to Proton on Wednesday January 15, 2025 @03:47AM (#42708772)
I agree, though self hosting can be too hard for everyday non tech users. I think the fact that Proton exists, regardless of all their issues, is still a good thing and a move in the right direction
Re:I failed moving my Google calendar to Proton on Wednesday January 15, 2025 @03:43AM (#42708758)
I started out using Proton calendar but ended up discovering the dates are actually not encrypted, which I think is quite an oversight. Haven't found a replacement unfortunately so it might just be the best option for the cloud. For now a local notepad calendar it is!
Re:I failed moving my Google calendar to Proton on Wednesday January 15, 2025 @03:40AM (#42708740)
Here's a relevant article - essentially I think Fastmail may actually be the more private option, since E2EE email promises are only at-rest if you don't use PGP.

https://ownerofhappy.org/encrypted-email-bad

Re:End-to-end encrypted email is bad for you on Friday January 10, 2025 @12:09PM (#42657518)
Well, these services take a lot of moxie to run
Re:End-to-end encrypted email is bad for you on Wednesday January 08, 2025 @07:32PM (#42640231)
That is a great distinction to make, though E2EE email providers don't even meet "pseudo E2EE". Unless using PGP, emails are encrypted on the server, making it no more than encryption at rest that can be bypassed without ever updating the client.

Unfortunately most encrypted providers skip through all these details and jump straight to advertising "zero knowledge encryption" which is dangerously misleading