• kevincox@lemmy.ml
    link
    fedilink
    English
    arrow-up
    0
    ·
    5 months ago

    Yeah, this is one of the things that I quite like about Proton. It provides a migration path. You start sending and receiving plain-text mail (then encrypted before saving) but now you can use an open standard protocol to start communicating securely and Proton can slowly lose the ability to read much of your email.

    IDK if the other “easy encrypted” providers just use standard PGP.

    • sugar_in_your_tea@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      5 months ago

      AFAIK, Proton’s standard is PGP, they just manage the keys for you (I’m guessing keys are AES encrypted and decrypted on the client) (source):

      Proton Mail’s end-to-end encryption is based on an open-source version of PGP.

      Tuta doesn’t use PGP, but it uses open encryption standards for it. So it’s a wash IMO since both are only used for internal emails (within their respective platforms).

      For messages to external email addresses, they use pretty much the same thing: password-protected access through their platform (i.e. you click a link to Proton or Tuta and enter the password to decrypt).

      I don’t know about other email services, but those two both seem pretty good, regardless of whether PGP or GPG is used internally. I haven’t reviewed the source code of either, but both have open clients so maybe I’ll get around to it at some point.

      • kevincox@lemmy.ml
        link
        fedilink
        English
        arrow-up
        0
        ·
        5 months ago

        I think you are agreeing with me. I like Proton because it uses a standard protocol and it provides a migration path from unencrypted to encrypted.

        PGP and GPG are effectively synonyms in this context. (GPG is just an implementation of PGP)