related posts
405 sats \ 7 replies \ @Rock 11 Oct 2022 freebie
Hasn't proton collaborated with Swiss authorities to give up user information?
Link: ProtonMail Amends Its Policy After Giving Up an Activist’s Data
DYOR on privacy and understand what guarantees you are actually getting when using services like these.
reply
11 sats \ 0 replies \ @takaponka 12 Oct 2022
Under swiss law an email provider has to comply. French activists didn't protect themselves with tor/vpn. For the VPN this is different, swiss jurisdiction don't have to snitch their clients. Remember that when you use VPN the data center which routes your traffic is what matters.
For example, if the data center routing your traffic is in France, law can just go to the DC provider and France will comply and snitch on you, and PROTON can't do shit.
That's why functions like secure core (just a hop on swiss DC) makes sense, because the French DT will snitch swiss IP and not yourse.
VPN shield is just as good as the law the countries you go through.
reply
3 sats \ 5 replies \ @shyfire 11 Oct 2022
Sort of, the devil is in the details on this one. I'd recommend familiarizing yourself with the details and to clarify what you mean by "give up user information".
But yeah, remember that subject lines are ALWAYS in plaintext, and that they are required by law to log which IP address you are using to access their service.
reply
1 sat \ 4 replies \ @DeezSats 11 Oct 2022
That's a fucked up law.
reply
5 sats \ 3 replies \ @sime 12 Oct 2022
IIRC the ProtonMail user would have been safe if they accessed the service via a VPN. Even if it was there own VPN product.
Swiss VPN providers can't log IP addresses.
At least this is how I remember it when that unfortunate shit show happened.
reply
2 sats \ 1 reply \ @takaponka 12 Oct 2022
They don't have to give it but they definitely have it. There is no such things as "no logs VPN".
There are always logs or team wouldn't be able to fix shit
reply
0 sats \ 0 replies \ @sime 12 Oct 2022
Yeah by log, I meant give them to authorities.
reply
0 sats \ 0 replies \ @shyfire 12 Oct 2022
Correct
reply
26 sats \ 0 replies \ @siggy47 11 Oct 2022
I use protonmail, proton vpn, proton calendar and proton drive. I am gradually escaping Google World. I hope stealth is as promised. I would be curious to see if anyone from China or other VPN busting jurisdictions could post a review in the future
reply
110 sats \ 0 replies \ @sommerfeld 12 Oct 2022
How does Stealth solve that?
Is it like DoH and masks itself as HTTPS traffic? If so, is that really the definitive solution to all protocols that want to be censorship resistant? Seems lazy and shortsighted if that is the case.
And even the initial https connection leaks the IP address it is connecting to which in case of proton is easily identifiable by authorities as a VPN provider.
How do they get around that issue? Do they routes the last mile traffic using tor or i2p? If so, how reliable is that?
Or do they use their own tor like anonymity routing? But doesnt that cause it's own problems since the smaller you are the more you stand out from the crowd.
Finally, is there any known case of wireguard being censored? Is there really a need for a another competing VPN protocol?
reply
102 sats \ 3 replies \ @mf 11 Oct 2022
How would that compare with this? https://safing.io/spn/
reply
103 sats \ 2 replies \ @RottingCleaner OP 11 Oct 2022
SPN comes without support for mobile devices.
reply
1 sat \ 0 replies \ @DeezSats 11 Oct 2022
Would it work if you vpn to your own Linux vps that routes your traffic through SPN? Or is the route setup client-side
reply
1 sat \ 0 replies \ @mf 11 Oct 2022
Good to know 👍
reply