Proton Mail Finally Releases Desktop Apps With a Linux Beta Version
Proton Mail Finally Releases Desktop Apps With a Linux Beta Version
Now you can try Proton Mail on your desktop!
You're viewing part of a thread.
@timewarp @Quill7513 The only real alternative IMHO is hosting your own mail server and *that* is no alternative at all, because big-tech will blacklist your server immediately⊠so Proton/Tuta are the lesser of all evils. If you have a true alternative I am listening.
You can use PGP with just about any email service. I personally just use SimpleLogin, where you can add your public key to have all your messages encrypted. But Thunderbird, KMail, Evolution, FairMail, etc all support email encryption too with IMAP.
@timewarp ok, PGP ⊠remember EFAIL⊠and all kinds of usability issues which inevitably lead to security issues by âwrong useâ at some point. And another *centralized* âweb of trustâ (benign as it may be) is also not something I look forward to. O well, some genius will emerge at some point and deliver us đ„ł may he/she/it/them be FOSS-minded
It's quite possible that privacy is too hard for you and trash talking open source makes you feel better about the money you're paying to someone else to say they'll do a better job for you.
@timewarp donât know what youâre talking about, I love FOSSâŠ
Okay, well it's just the vulnerabilities you mentioned were geared towards email client issues that among other things would automatically load HTML data upon decryption. Furthermore, primary vulnerable targets were 10 year old email clients at the time that hadn't received any security updates. The SE data packet issue had been documented even in the spec since at least 2007 about its security issues and recommended rapid mitigation techniques. All in all, the EFAIL documented issues with mail client failures, not with OpenPGP itself.
Second, OpenPGP web-of-trust, or whatever you want to call it (public keyservers) is entirely optional. In fact, Proton relies heavily on this in from what I can tell actually enforces it in a more insecure way, but opting users into their internal keyserver automatically.