Proton Mail Discloses User Data - Is It Still Secure?

[@hyplayer]

Honestly at this point i might just ditch email

[@gemsbok.]

There is a reason that some of the world's most highly guarded areas are completely closed networks.

[@raylopez99]

Why, you a terroist? :)

[@anonymous6666]

Love this take. You're absolutely correct about peoples' ignorance with threat modeling, you can't claim to care if you didn't do diligence to understand the technology. Please keep posting more short clips from the podcast, like this!

[@Snicker433]

Proton are obligated to give any data to authorities that they are able to. Maybe don't use a recovery email? As that was the only thing they could give. To me this is more of a reason to trust Proton.

[@brettlaw4346]

What stops all requests from coming with terrorism allegations?

[@trucid2]

Nothing. And if a company gets an NSA letter, it comes with a gag order. They're not allowed to even tell their users that they were forced to disclose their data.

[@metalema6]

Considering they already label any anti-immigration sentiment as terrorism, nothing

[@QEDAGI]

Made me check whether I have a recovery email at Proton. I don't. Thanks for the heads-up.

[@russellmania5349]

I don't have a recovery email and I have a long password.

[@likebot.]

If having a recovery e-mail was an option on all e-mail providers it would be easier to skirt this by creating two anonymous accounts and using each as a recovery e-mail for the other. BTW, what _is_ the difference between a verification and a recover e-mail? I always thought they were the same idea.

[@potatoe4221]

I've never in my life been forced to set a recovery email for an email.

[@likebot.]

@@potatoe4221 Then it must be forcing you to give a phone number instead then. And probably your name, birthday, gender...

[@ТеофрастБомбаст-ы2т]

In proton, when youbregister you must verify your email once, that proove you are a real person not a bot registring dozens of emails. So you basicaly recieve email from proton on your regular mail, lets say gmail. Once you verify yourself, they never use your previous email adress again. But if you want you can register it as a recovery, or other email, same in google mail. Then if you forgot your password, they will send you a massage to your recovery email, and you can reset password.

[@likebot.]

Oh good! I was under the impression that there were still bots.

[@Ghostintheshell3551]

I use Proton :d It has never failed my and i dont do illegal sht /

[@agt313]

Why would you use a recovery phone or e-mail, it defeats the whole purpose !!!

[@russellmania5349]

I have no recovery email and a 16 digit password.

[@im1random263]

Okayyyy noting down... do not use iCloud as recovery email for terrorist stuff...

[@elixier33]

It was never secure.

[@baronvonlederhosen]

To me Protonmail is way too overpriced for what it offers. Posteo does a great job and I don't need more privacy than that they offer.

[@trucid2]

@@shoop9274 If it's free, you're the product.

[@williamtopping]

It always amuses me when supposed 'security experts' champion services like this. Soon as they do that, they disclose how stupid and ignorant they actually are on security matters. Trust no-one is the ONLY security advice you really need to know. Behave as though you've ALREADY BEEN compromised. Anyone who claims otherwise is fooling you.

[@MarigoldAW]

You are right but the average person's threat model is not to be completely and totally anonymous. Most people who opt out of relying on google for everything are just looking for a bit more privacy offered by these services and in my opinion these services are great for that. A bit more privacy without causing significant disruption in their day to day

[@finnderp9977]

Well legal company cannot ignore law and authorities, otherwise it would be criminal gang.

[@russellmania5349]

@@MarigoldAW I'm not sure why anyone would have a recovery email if you're using Proton Mail.

[@MarigoldAW]

@@russellmania5349 Where did I mention anything about a recovery email?