• BCsven@lemmy.ca
    link
    fedilink
    arrow-up
    1
    ·
    2 days ago

    Proton mail is encrypted on the server with your key and proton does not have access to it. If you lose your login credentials and have to reset then you lose your old email because that key is not getting recovered.

    • hperrin@lemmy.ca
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      The email comes into their server unencrypted. They promise that they will encrypt it for you, though. Of course, you’re also relying on the sending server to keep the message secure as well.

      • BCsven@lemmy.ca
        link
        fedilink
        arrow-up
        1
        ·
        1 day ago

        Proton Mail’s end-to-end encryption and zero-access encryption ensure only you can see your emails. Not even Proton can view the content of your emails and attachments.

        • hperrin@lemmy.ca
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          1 day ago

          The vast majority of senders do not send email using end to end encryption. If you’re sending an email from a PM address to another PM address, sure, it’s end to end encrypted. If you’re sending to another service, it’s not end to end encrypted unless you’ve both gone through the painful steps of setting up PGP encryption. Same as if you’re receiving from another service.

          You can read about it here:

          https://proton.me/support/proton-mail-encryption-explained

          So that quote you just responded with is saying exactly what I had just said above it. They promise that they’ll encrypt that unencrypted email that just came into their server for you. And they promise that they’ll encrypt that unencrypted email you just sent outside their service.

          • BCsven@lemmy.ca
            link
            fedilink
            arrow-up
            1
            ·
            23 hours ago

            I know, but I was answering the question about encryption, rather than users. Proton also allows sending encrypted to non participating receivers. They get a weblink and have to open it to view the email a with password if supplied. That decrypts the email at the browser, and has an expiry time on the link.

            • hperrin@lemmy.ca
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              21 hours ago

              That’s a very different use case than a fax. I mean, why even use email for that?

              • BCsven@lemmy.ca
                link
                fedilink
                arrow-up
                1
                ·
                21 hours ago

                I wouldn’t, fax is gone once it has arrived, assuming store transmissions is off. Email is sitting in limbo on a server waiting for an exploit