Proton Mail came under scrutiny for its role in a legal request by the Spanish authorities leading to the identification and arrest of a user.

  • BrikoXOP
    link
    fedilink
    English
    arrow-up
    28
    arrow-down
    6
    ·
    edit-2
    1 month ago

    They always complied with legal court orders, as all companies do. It just highlights the fundamental issue with email as a protocol.

    • lemmy_in@lemm.ee
      link
      fedilink
      English
      arrow-up
      28
      ·
      1 month ago

      This has nothing to do with email as a protocol. The court order discussed in the article asked for the recovery email address of an account. No actual email data was transferred.

      • BrikoXOP
        link
        fedilink
        English
        arrow-up
        7
        arrow-down
        2
        ·
        1 month ago

        I’m aware. But some user data and metadata required for email protocol to function that can’t be encrypted is the fundamental issue. No provider can solve this issue, no matter how private and secure they are.

        In this specific case, the user was a dumbass and linked another email that was tied to Apple. My point was more about email being flawed by design and a need for an alternative protocol if we want true privacy.

      • Meldrik@lemmy.wtf
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        7
        ·
        1 month ago

        I wonder what the authorities could use the recovery email for? Did they gain access to the Protonmail through the recovery email?

        • WhatAmLemmy@lemmy.world
          link
          fedilink
          English
          arrow-up
          17
          ·
          1 month ago

          It’s in the article ffs. The recovery email was managed by Apple, so they made a request to Apple and obtained the users real identitiy. Once they arrest the user they can gain access to all the users accounts — unless the user had specifically guarded themselves against that possibility.

        • BrikoXOP
          link
          fedilink
          English
          arrow-up
          8
          ·
          1 month ago

          Recovery email was tied to Apple, so they asked Apple to private the data they needed. No email content was shared at any point from Proton.

        • voracitude@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          edit-2
          1 month ago

          If they could get into the recovery email, yeah, they could get into his Proton account. Also useful just for confirming the ID of the person in question.

    • Grangle1@lemm.ee
      link
      fedilink
      English
      arrow-up
      7
      ·
      1 month ago

      It’s just a general rule of thumb: privacy and security companies can work well against outside attacks but can only do so much against a government/court order, so don’t expect any of them, not even Mullvad, to go to jail for you. Encryption, anonymization and no logging are the most anyone can expect/hope for from a company, which still puts companies like Proton or even Tutanota leagues ahead of the spyware that is Gmail, Yahoo or Microsoft when it comes to email. The end user needs to do the rest themselves.