this post was submitted on 14 Jan 2024
1018 points (98.8% liked)

Technology

59594 readers
2835 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] voracitude@lemmy.world 6 points 10 months ago* (last edited 10 months ago) (1 children)

Proton encrypts and decrypts your data on your machine. The secure key for this lives on your machine and never leaves. Proton do not have a copy of your key because if that key is shared with anyone, human or program, then it is no longer secure. In order to build the feature you're talking about, that security would have to be broken. Not changed: broken. Made ineffective. Thus defying the entire point of the product.

I recommend further study. This will get you started: https://www.eccouncil.org/cybersecurity-exchange/cyber-novice/free-cybersecurity-courses-beginners/

[–] sir_reginald@lemmy.world -3 points 10 months ago (1 children)

just let me encrypt my data locally. I don't trust their obfuscated JavaScript to handle my encryption keys. Give me IMAP and I'll use my good old client with my OpenPGP plugin.

[–] voracitude@lemmy.world 5 points 10 months ago* (last edited 10 months ago)

Your data is encrypted locally with Proton. Your second sentence is what you really mean, and I'm not saying you have to use or trust Proton, just that because of that local encryption of the data, third party apps can't access the data without compromising the security of the service.

Your described setup takes knowledge (and patience!) which customers of Proton do not possess. If you do, Proton is not the product for you, but it doesn't matter because you can build and maintain what you need.