Mr Roth's video appears to be using an earlier development release of ProtonMail that was originally released on May 10th, 2014 for public testing. 'The ProtonMail security team has reviewed the video released by Mr Roth and confirmed that this particular security issue is not present on the live version of ProtonMail. The concept of encrypting on the client side is a relatively new one and comes with its own security challenges which we are working diligently to tackle,' the outfit said in a statement to El Reg after our story was published.

'ProtonMail is constantly making security improvements through our beta process and we appreciate all the assistance we have received from the community in helping us make ProtonMail better. While ProtonMail has fixed the bugs highlighted, the company said it would welcome additional security advice. This information can then be shared with other members of the Five Eyes allegiance.But it does say something about the state of play in the industry when a system designed from the ground up to be secure is defeated by what is a relatively common attack vector. (And in the U.S., emails are considered “abandoned” after 180 days, so the government can request them without a warrant.) This includes inbox contents, metadata, IP addresses, and more. and may be forced by law to turn over information on its users. Switzerland is not part of the Five Eyes intelligence-sharing agreement that exists between the U.S., Canada, Australia, the United Kingdom, and New Zealand.īy comparison, Google is located in the U.S.

This means that ProtonMail can’t be forced to hand over data to authorities in the U.S. In addition to not being able to read the email stored on their servers, ProtonMail is based in Switzerland, where privacy laws are notoriously strict. RELATED: What Is End-to-End Encryption, and Why Does It Matter? ProtonMail’s Servers Are Located in Switzerland Unlike with ProtonMail, which explicitly supports the feature, working with PGP inside of Gmail is much less streamlined and borderline unusable on mobile. Using PGP inside of Gmail is possible but difficult, with browser extensions like Mailvelope and FlowCrypt making it easier to manage.

Sign into protonmail