Encrypt all the things!

Yeah I know they are open about it, but that still doesn't make it ok in my opinion.

It's the cost of the service, they tell you about it, you get industry leading spam and phishing protection into the bargain- what's not to like?

If you don't want to be the product, that's fine.

If you don't want to be the product then you have to pay for it (and even then with some companies you're still the product).

What's your rationale for using an encrypted mail system (like protonmail)?

If it's so that your email isn't read by a computer (e.g. gmail) to help target the advertising you get, then any system that doesn't scan your emails should be ok, the encryption isn't necessary.

If it's so that your email cannot be read by anyone else (because it's stored encrypted) then it's tricky as

• you have to trust the email company not to have escrow keys so that your email can be read by third parties
  
• the majority of people don't use an encrypted email provider, so lots of your sent emails will be sitting there in plain-text on other servers (such as gmail's)
  
• doing encryption properly is very hard, almost every company screws it up or relies on something that is actually slightly flawed
  
  

If you're really bothered about securing communications between a few specific people then gpg is probably better suited to your needs.

What's PM cost per year? Do I need an Android app to read my mail?
Not sure I can let go of the convenience of not encrypting my mail :S
Shudder to think of explaining to my parent's how to read my emails..

What does the encrypted email look like to non-PM users? I mean, say they have gmail, they'll get a pile of cyphertext appear? How do they decrypt it? Thinking of non-technical users (me mum) trying to read a Proton Mail I send..

Do you want to buy those guns you emailed me about or not?

time for apple to re encrypt all the things

FBI Opens San Bernardino Shooter’s iPhone; U.S. Drops Demand on Apple
http://www.wsj.com/articles/fbi-unlocks-terrorists-iphone-without-apples-help-1459202353

Nah, the FBI can't do it. They're just saying they can to save face because they knew they couldn't win the case.

It sets a bad precedent for them if they loose, whereas backing down (and telling people they can do it anyway) leaves it all open until next time.

Protonmail starts at free, and has accounts at €5 and €30 a month. The pricing is very flexible, so you can pick what you need and only pay for that. see here

You can access email from a web browser or their iOS/android app.

The whole point of what they have created is to make encryption easy, you barely notice it. There is a TED talk, and various other articles from the founder(s) explaining the whys.

You don't have to think about the encryption process at all if you are sending emails between Protonmail accounts. If you are emailing others then you just pick a password which you communicate to the recipient and then that's it. You can also send a password hint

When you create your account you pick two passwords, one account pw, as you would with any online account. The second is what creates the encryption. If you log into a web browser then you have to enter both passwords to get into your account. the iOS app remembers them after the first input. Two passwords is all that's different really. Again, they explain all this on the site.

To any non PM user, you don't really have to bring up encryption, just tell them that they will need to enter a password when you email them. They receive an email with a link they click to see your message (see attachment 1). Non of the email body is sent plaintext, and nothing is viewed as cypher text. Attachments are also encrypted.
They click the link and enter the password (attachment 2).
The message is displayed with an option to reply securely (attachment 3).

@hippy - If you want, let me know your email and I'll send you one to run through, or just sign up for a free account and crack on!

3 Attachments

if the FBI have cracked it, then most likely its a hardware crack the likes of which takes mega big bucks worth of kit and leaves the phone pretty unusable at the end. Stuff like NAND mirroring, which I've read about rather than have any real understanding of mind you. Involves lasers and shit.... this isn't at all likely to be a software exploit or something that phone thieves or your bog standard fraudster are going to be able to use to get the phone they pinched off you going again.

I see. Thanks muchly for the run down.

Still not sure I can bring myself to move away from Gmail and archived emails. I mean the service has to keep running or you lose all your email history right? Any bulk import/export facility?

Surely it's more likely to be a software exploit. Someone else will eventually find it and Apple will patch it like all other security issues.

it could be just that they tried a few passwords and it worked when they tried 1234!

i can see that would be an issue if you've got a lot of email history to move. I only found this on import/export. Not currently available but something which they plan to add in future.

I'm planning to use protonmail for things I deem important (banks, mail about my property etc...) and gmail for shitty ass websites and stuff

The San Bernandino iPhone was a 5c, there's a known vulnerability that allows injection of arbitrary code via DMA on the 5c. Beyond the average Joe Bloggs but the FBI should have the smarts to be all over it.

The FBI were shooting for the ability to crack every iPhone at will, Apple (thankfully) pushed back, and they defaulted to the DMA hack as they couldn't risk losing the case.

Later iPhone versions don't suffer from the same vulnerability, but then they could also suffer from all number of as yet unknown vulnerabilities.

In the end I just went with a google apps for business account. Gmail with my own domain name is pretty win plus apparently they don't read your mail or serve you ads. Whether I believe that or not is another matter.

Also, push now works on the iPhone.

Dragged off my todo list...

https://www.maxmasnick.com/2013/07/19/fastmail/

Your house must be so clean.
I'll stick with Google apps for a while and see how it goes but may still try Fastmail eventually...
Still got a free proton account for illuminati stuff.

I don't get it?

I signed up and it started importing emails from gmail. Gotta prep bike for audax now though.

How do I fix PIA? The TAP needs to be reinstalled but not sure what's wrong. I can't seem to do it. Any ideas?

Hmm so anyone got tips for perf tuning openvpn connection ? I top out around 3M/s right now, connection should do ~14M/s. I checked my remote end, it's fast

Selecting best server based on latency...
Hosted by Monkey Brains (San Francisco, CA) [0.10 km]: 8.474 ms
Testing download speed........................................
Download: 781.53 Mbit/s
Testing upload speed..................................................
Upload: 451.01 Mbit/s

I'm guessing I should switch to UDP from TCP for sure, but not sure what else. My local end is OPNsense (freebsd), other end is Ubuntu

You sure something closer wouldn't be quicker? Ping ain't everything. Maybe contention issues?

yeah I might try out a few other VPS services to see. I swear though it's the bsd client doing something weird. Will connect tonight direct from windows and see what speeds I get.

previous vps @ digital ocean I could max out my line from Windows. Never did try from *nix.