• RBG@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    0
    ·
    6 months ago

    They provided the backup e-mail address

    Upon receiving the recovery email from Proton Mail, Spanish authorities further requested Apple to provide additional details linked to that email, leading to the identification of the individual.

    Just in case anyone thinks they decrypted mails and handed them over, nope. I hadn’t thought about that “settings” are not encrypted. Guess if you want to stay anonymous you shouldn’t add your private mail address in there as a backup.

    • Alk@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      6 months ago

      Yeah. Even if they couldn’t hand over recovery emails, having a personal email as a backup to a “private and sensitive” email account is bad practice.

      • BlushedPotatoPlayers@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        0
        ·
        6 months ago

        But what do you do if that field is needed? A throwaway address won’t work as it’s easy to recreate. Buy your own domain and run a server?

        • Scrollone@feddit.it
          link
          fedilink
          English
          arrow-up
          0
          ·
          6 months ago

          No, domain names are tied to a person and, even if that person register the domain with fake person details, there will be a digital payment associated with the purchase.

        • /home/pineapplelover@lemm.ee
          link
          fedilink
          English
          arrow-up
          0
          ·
          6 months ago

          I put the Simplelogin email alias as my backup mail. Which forwards mail to my proton, so I guess it isn’t really a backup. Even more so if you realize I need to sign into simplelogin with my protonmail account and protonmail owns Simplelogin.

        • Alk@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          6 months ago

          I don’t believe you need that field with Proton, correct me if I’m wrong. If you do need that field with an email provider, and you need complete opsec, use a different provider.

          • shortwavesurfer@monero.town
            link
            fedilink
            English
            arrow-up
            0
            ·
            6 months ago

            It wasn’t a requirement when I signed up several years ago, and to my knowledge, it’s still not required now. Just as long as you keep your email and password in something like a password manager and don’t fuck it up, you’re fine.