While trust is very subjective, ProtonMail’s logging activities and subsequent website revisions have certainly raised some eyebrows. When a privacy service’s claims do not line up with reality, trust is eroded and potentially lost forever. ProtonMail scrubs “we do not keep any IP logs” from its website… after IP logging incident
It is also interesting how ProtonMail responded to this situation and the subsequent website revisions. The “extremely limited user information” is enough to find and arrest a ProtonMail user, with IP address and device info data.Governments can simply go through a Swiss court and then ProtonMail will start logging any user that is requested by the court. Switzerland jurisdiction does not mean very much.So now let’s compare the reality of this situation with ProtonMail’s claims. Here is how ProtonMail advertises itself and its Switzerland jurisdiction. Not only have they claimed to not keep any IP logs by default, but they also regularly tout their Swiss jurisdiction, which allegedly confers legal independence. In the case of ProtonMail, they have boldly touted their privacy and security credentials for years. We place a lot of trust in privacy services to do what they actually say. ProtonMail touts Swiss jurisdiction and privacy protection But should we jump to condemn ProtonMail or is this type of situation inevitable with privacy services? Let’s examine how ProtonMail responded to the situation and put it into context by comparing it to other cases where email and VPN services provided logs to authorities - as well as cases when they did not. The key evidence of what transpired behind closed doors was a court document detailing how ProtonMail provided IP address logs of its user to French authorities. The news gained traction first on Twitter, with various media outlets also picking up the story. The logs that ProtonMail provided helped the police to further build a case against the person, ultimately leading to his arrest. Note: ProtonMail has provided us with more clarification, stating that the location and identity of the suspect were already known to the police. So received a legal request from Europol through Swiss authorities to provide information about Youth for Climate action in Paris, they provided the IP address and information on the type of device used to the police - Etienne – Tek September 5, 2021
0 kommentar(er)
