From Paltry Hamerkop, 11 Years ago, written in Plain Text.
Embed
  1. > protonmail.ch
  2.  
  3. This appears to be just one of many startups offering non-solutions.
  4. From what I can tell, you are loading the code they provide on the fly
  5. into your browser to execute crypto ops on your behalf. That is just
  6. plain bad. Remember hushmail? When you give up your environment
  7. to the same parties providing your service, you give up the game. And
  8. it's centralized, few will choose different passphrases, etc.
  9.  
  10. https://protonmail.ch/blog/protonmail-threat-model/
  11. "There are more difficult to use, but more secure solutions out there,
  12. which are more appropriate for Snowden’s use case."
  13.  
  14. For one, you're better off learning and using some underlying tools
  15. like these instead...
  16. https://www.gnupg.org/
  17. https://www.enigmail.net/
  18.  
  19. https://protonmail.ch/sign_up.php -> https://protonmail.ch/invite
  20. "Notification Email (Required) - Used only to contact you about our
  21. public beta. This should be your current email (Gmail, Hotmail,
  22. Yahoo!, etc) - not your new protonmail email. ... Your notification
  23. email will not be linked to your ProtonMail account - it is only used
  24. for communicating with you during our beta and will be removed from
  25. our system after the beta."
  26.  
  27. This is a failure of implied and stated privacy ethics. Invites are linked.
  28. And it should not be asked for in the first place. Thus never on the
  29. system and no trust needed.
  30.  
  31. "response to our open beta has maxed our server capacity. We're
  32. working hard to add more servers
  33.  
  34. While open and honest if true, this does not inspire systems confidence.
  35.  
  36. "I think it is safe to say if we were NSA funded, we wouldn’t need to
  37. be going around competing for 100k startup awards"
  38.  
  39. Actually, that is precisely what you'd want to do.
  40.  
  41. There's no architecture whitepaper.
  42.  
  43. And so on, etc...
  44.  
  45. It's a useful service and a step in the game. Just be exactly sure
  46. of what it is and what it is not. And you should not rely on service
  47. providers to be the sole source of your answer to that question
  48. either.
  49.  
  50. > ProtonMail's public Bitcoin address:
  51. > https://blockchain.info/address/1Q1nhq1NbxPYAbw1BppwKbCqg58ZqMb9A8?filter=2
  52.  
  53. I'd rather fund something like...
  54. "The next gen P2P secure email solution"