Proton: “We’re consolidating our social media presence due to limited resources and no longer posting on Mastodon. Follow us on Reddit for the latest updates”

  • @DreamlandLividity
    link
    English
    74 hours ago

    Was it ever? I ditched them years ago when they tried to gaslight people that e2ee in javascript in browser is secure.

    • @[email protected]
      link
      fedilink
      English
      12 hours ago

      Security is hardly a binary property.

      Given you mention the specific technical setup, I would say yes - that is secure against most risks relevant for most people.

      At least, it’s totally fine according to my own threat model, where I looked specifically at broswer-based encryption vs “manual” encryption (I.e. using PGP tools locally).

      • @DreamlandLividity
        link
        English
        1
        edit-2
        31 minutes ago

        It is nuanced, but having the ability to selectively serve malicious javascript stealing keys to specific people only on one access is considerable issue in practice, compared to distributing binary where you would generally have the same binary for everyone and you are able to archive and analyse it. Especially if you use third party distributions, like github releases or flatpaks.