Proton Mail came under scrutiny for its role in a legal request by the Spanish authorities leading to the identification and arrest of a user.

    • @asdfasdfasdf
      link
      English
      410 months ago

      Well the key tip is that recovery emails are not encrypted.

      • @NeatNit@discuss.tchncs.de
        link
        fedilink
        English
        210 months ago

        Depending on what its purpose it, it likely needs to be unencrypted (or at least decryptable by the operator without the user’s key) in order to function. A recovery email likely needs to be used precisely when you don’t have your password, so it can’t work if it’s encrypted with your private key.

        I suppose this isn’t necessarily obvious to a user but it’s not a flaw or fault of Proton, it’s unavoidable if a recovery email is used. Note that it’s optional to add one (see article update).

    • typhoon
      link
      English
      110 months ago

      Honest question, what we should be using as of recovery email? Another Proton Mail?

      • @drdiddlybadger@pawb.social
        link
        fedilink
        English
        410 months ago

        Nothing that is tied to you directly at all if you genuinely care about that. Or better yet no recovery email at all that you can use. If things get lost consider the account lost.