this post was submitted on 17 Jun 2024
617 points (98.1% liked)

Technology

59219 readers
3314 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] sugar_in_your_tea@sh.itjust.works 8 points 4 months ago (2 children)

Proton stores email subject lines unencrypted to facilitate search, Tuta does search client-side so everything can be completely encrypted. Both have access to unencrypted email when they receive it, so it's not a huge difference, but given the cost difference, I figured I'd give Tuta a try first.

[–] Wispy2891@lemmy.world 5 points 4 months ago (1 children)

i wonder how is the experience of searching between millions of emails client side

Not great. I have a couple hundred or so, and it's already a bit slow on my phone.

[–] AProfessional@lemmy.world 1 points 4 months ago* (last edited 4 months ago) (1 children)

While it does help with search it was required to be compatible with OpenPGP.

[–] sugar_in_your_tea@sh.itjust.works 1 points 4 months ago* (last edited 4 months ago) (1 children)

I don't think that's true. They can always do PGP on the client after decrypting the email (so double-encrypt). It's also not particularly interesting because almost nobody uses PGP. It's a design decision that I'm not a big fan of, but if they're legally obligated to maintain my privacy, maybe I'm okay with it. I'll give it some time and see how that pans out.

[–] AProfessional@lemmy.world 1 points 4 months ago (1 children)

OpenPGP is actively supported by dozens of clients, they cannot and do not encrypt subjects, so Proton chose to be compatible with that. I think dismissing cross-compatibility because of a hand wave “nobody uses it” isn’t very productive either.

AFAIK, PGP is only automatically used in emails to other Proton users, you need to do it manually if you want to communicate with someone else with PGP (or use the secure email thing, which does it on Proton's servers). So the PGP is largely just an implementation detail in how they store it, unless you're communicating with a lot of other Proton users.

Then again, it's been a couple years since I used Proton, so I don't know if things have changed. But since nobody I contact uses Proton or Tuta, it's irrelevant that Proton uses PGP. If I use PGP, I'd do it myself regardless.