Hacker News new | ask | show | jobs
by influx 3225 days ago
Also the fact that they leaked an internal document to the world doesn't give me great confidence they won't do that again. There have already been instance of Google employees snooping in gmail:

http://www.businessinsider.com/google-engineer-stalked-teens...

1 comments

What makes you think ProtonMail employees couldn't do the same? Not a critique of PM (I'm a paying user myself), but this is not a reason to switch.
>What makes you think ProtonMail employees couldn't do the same?

ProtonMail is end-to-end encrypted. (Can't verify it myself, though.)

Some of their software stack is open source. You can go have a look how it works for yourself, of course you have to trust that what they opened is what they run- but the foundations seem solid at least.

https://github.com/ProtonMail/WebClient

How does an open source software stack stop employees from reading content?
When they receive an email, they encrypt it with your public key. The private key is stored on their server encrypted with a passphrase only you know.

Assuming they don't backdoor their client to find out your passphrase, or log emails as they receive them, you're fairly safe from having an employee browse through your emails.

Has anyone audited that system and implementation? If not, can you really trust that there's no backdoor?
No, and no. I don't actually use them, I just looked up their implementation. It also looks like I was downvoted for clarifying how they say their system works. Obviously open source doesn't absolve you from having to trust the company running the software.