Technology

59578 readers

2917 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

259

Police shut more than 14,000 accounts on Mega, Tutanota and Protonmail (therecord.media)

submitted 9 months ago by ray@lemmy.ml to c/technology@lemmy.world

31 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] Diotima@kbin.social 20 points 9 months ago (2 children)

Fair question!

If an email address is being used for fraud, they don't need to see the encrypted copy; they can see the copy sent out to other people from that address. So if I send you a message from my Protonmail to your Gmail, the following is true:

Copy @ Protonmail: E2EE.
Copy @ Gmail: NOT E2EE.

There are other, circumstantial ways to tell as well. If you're trying to scam people with DudeBro Cryptocurrency, you necessarily reveal the address you use when you send our your spam or scams. If I send malware from notactuallydiotima@proton.me, the proof that I sent the malware does not require you to see my server stored mail; you can just look at your own copy to see.

Does that make sense?

[–] jkrtn@lemmy.ml 1 points 9 months ago

Surely Proton also receives the mails in plaintext? There's no E2EE about it. You have to take their word that they encrypt it and discard the plaintext data.

[–] ItsComplicated@sh.itjust.works 1 points 9 months ago (1 children)

So any email address is not encrypted even if the message goes to another encrypted account? Is this correct?

[–] baseless_discourse@mander.xyz 3 points 9 months ago* (last edited 9 months ago) (1 children)

Yes, the "to address" cannot be encrypted as it is necessary to deliver the mail, the "from address" are needed to send a notification when the "to address" doesn't exist.

Technically, the "from address" probably can be encrypted, like in signal; but I think it is required in the current email standard.

[–] ItsComplicated@sh.itjust.works 2 points 9 months ago

Thank you. This helped.