Will these emails be more secure?
Not exactly. Maybe you benefit from an additional virus scan (if Proton does this). What you certainly benefit from is the “only load external resources when told to” feature. This prevents tracking since loading the external resource == the mail was opened.
What exactly do you want to achieve in terms of security?
What exactly do you want to achieve in terms of security?
I’m beginning to think many people here just want to throw money at a vague concept of “security” without having a crumb of a threat model in mind.
IMO people mainly just want big tech to quit snooping on everything they do.
On the other hand, it is a lot of hoops and a large learning curve for those to whom have no idea where to start other than having big tech stop snooping.
Yep, you hit nail on the head. This is currently me.
The problem with a late stage capitalist world is that the moment you realize you want to escape Big Tech, there are already numerous of services selling pseudo or marketable privacy-respecting product with comparable convenience to the competing Big Tech counterpart. This appeal to non-technical consumers means their willingness to “vote” with their wallet what they thinks is the best replacement.
The drawback of this, for non-technical consumers, is that it’s hard to distinguish between no-nonsense actual privacy-respecting services (with caveats laid out before you pay), where you’re forced to do research, and those filled with buzzwords and marketable features, where it’s easy to completely put your trust in these companies.
By definition, if you don’t feel like putting in the homework, you are ceding control to someone else. At that point, all bets are off. Even trustworthy entities can turn on a dime. Ease and full control are mutually exclusive.
deleted by creator
Get your own domain and use that with Proton so you can take your email address to whatever email provider you want, or host your own. In the future, switching won’t be nearly as hard since you’ll just need to redirect the domain to the new email provider instead of changing your email address with everyone, again.
no give me posts
I did that, I don’t have the time to change all my emails from my 15 years old Gmail account to proton.
So I’m just forwarding my emails from Gmail to Proton and started transitioning slowly. It’s not perfect but better than staying on Gmail.
deleted by creator
Technically you still have a web of trust with S/MIME. You just don’t say “I trust you because X said you’re good and I trust X” but you say “I trust you, because you paid X money and X did probably a good background check on you”. So rather a tree than a web.
I guess it is philosophical to argue if a tree can be considered a net as well.
[This comment has been deleted by an automated system]
Basically Let’s encrypt and geotrust certificates :D
Oooh, something like let’s encrypt but for mails would be nice
No. Proton only encrypts message content to/from other Protonmail users. Message subject, sender, and recipient aren’t encryptable for email.
It’ll be stored off of Google servers but they’ll see it anyways. Still, it’s best to do that while migrating emails. Have your old one forward to the new one.
Your emails are already scanned by Gmail at that point, so you’re defeating the purpose
No it’s not more secure going via Gmail. But what I did was to get the paid Proton Mail and I used my own domain name. So yes plenty pain and time now to slowly update my email address everywhere away from Gmail to my own domain name with Proton Mail.
But hopefully it’s the last time I have to update the email address everywhere, because even if I leave Proton Mail, my mail address is not tied to them, but to my own domain name so I can point that to any other mail provider.
So every mail address I’m changing now, is one away from Gmail. But if course 99.9% of businesses don’t Encrypt mail, so I’m only really cutting Google out of the loop (assuming the other party is not using Gmail of course).
If you’re forwarding from Gmail, then Google can still see all of your emails.
If you mean content privacy, like your email being read by someone else (or bots), final storage (protonmail) might be secure but it already could have been copied and analyzed as it went through gmail servers as you have guessed. This is how email was designed, copied around everywhere in plaintext, and there’s no avoiding it.
The paranoid advice (if you actually have something to protect especially from government agencies) is to use gpg in all emails to prevent snooping in transit as well.
