Proton Mail, the leading privacy-focused email service, is making its first foray into blockchain technology with Key Transparency, which will allow users to verify email addresses. From a report: In an interview with Fortune, CEO and founder Andy Yen made clear that although the new feature uses blockchain, the key technology behind crypto, Key Transparency isn’t “some sketchy cryptocurrency” linked to an “exit scam.” A student of cryptography, Yen added that the new feature is “blockchain in a very pure form,” and it allows the platform to solve the thorny issue of ensuring that every email address actually belongs to the person who’s claiming it.
Proton Mail uses end-to-end encryption, a secure form of communication that ensures only the intended recipient can read the information. Senders encrypt an email using their intended recipient’s public key – a long string of letters and numbers – which the recipient can then decrypt with their own private key. The issue, Yen said, is ensuring that the public key actually belongs to the intended recipient. “Maybe it’s the NSA that has created a fake public key linked to you, and I’m somehow tricked into encrypting data with that public key,” he told Fortune. In the security space, the tactic is known as a “man-in-the-middle attack,” like a postal worker opening your bank statement to get your social security number and then resealing the envelope.
Blockchains are an immutable ledger, meaning any data initially entered onto them can’t be altered. Yen realized that putting users’ public keys on a blockchain would create a record ensuring those keys actually belonged to them – and would be cross-referenced whenever other users send emails. “In order for the verification to be trusted, it needs to be public, and it needs to be unchanging,” Yen said.
Curious if anyone here would use a feature like this? It sounds neat but I don’t think I’m going to be needing a feature like this on a day-to-day basis, though I could see use cases for folks handling sensitive information.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
much thanks to @gary_host_laptop for the logo design :)
Don’t use proton…
You can’t just give all of your data to one company and expect it to be private
Is your suggestion to self host your email or not use email? I’m not sure why you couldn’t find a company that you do trust, and proton seems to be one of the most likely candidates.
@volleyballcrocodile @possiblylinux127 What about Disroot ?
Disroot uses proprietary JavaScript so I won’t consider it an option. I use posteo but I’m actually considering self hosting.
The problem is that I probably would end up renting a VPS which would be much more expensive for little gain.
In all reality email is pretty unprivate by design. Its better to focus on encrypted messaging.
@possiblylinux127 okay. But self hosting Posteo on a VPS ! The VPS company can still see your mails if it’s imap and maybe give them to the government as well.
Posteo is a company in Germany who sells email for very cheap.
deleted by creator
I suppose that’s a fair point, although I thought they didn’t have access to your data in terms of email content. I agree with the point about not putting all your eggs in one basket but I’d seriously consider them for email only.
The problem with Proton is the vast, vast majority of email you get in it will be visible by them first. This is an issue not with them in particular, but with the protocol itself. At the end of the day, even the best email or VPN provider can only say “trust me bro” and do their best to make themselves worthy of being trusted.