For example?
They also make promises which are based on trusting ProtonMail rather than trusting the math that underlies their security model - for example, they could trivially store a copy of incoming emails in plaintext before encrypting them normally, and they could then keep your emails in plaintext without you being any the wiser. Users who depend on their communications being private shouldn't rely on this, PGP does not require trust from anyone but the sender and recipient and has been working well for years. If they wanted to improve ease-of-use for PGP they should have done that, rather than building their own crap with questionable security promises on top of it.
I hope not. I hope everyone, not just "hipsters", would have such strong preference for standard, time-proven, open protocols like IMAP and SMTP.
FTP has same problem. Telnet was once a standard, time-proven, open protocols - does anyone have preference for that?
You can polish a turd by wrapping it in secure socket (SMTP over TLS etc..), but doesn't address the underlying issues with protocols that were designed for a day long passed.
Regardless of which you pick, I do recommend to look into getting a personal mail domain, then it's yours.
Protonmail U2F support and web UI are not perfect, but good enough.
Those were the deciders for my needs.
Also, if you want to have Calendar integration, there is none in ProtonMail.
I am sorry I am pasting an article instead of making my own point but the fact remains that just because it's Switzerland doesn't meant it's any better.
Because as a non US citizen, not having to touch US providers is quite a big plus in my book.
Only thing I don't like in them is lack of transparency how do they address customer feedback:
- no roadmap
- no uservoice
- no discussion forums
- the only big change I saw from them in past two years is the new Files UI (who does need it?)
They don't evolve and all feedback goes to /dev/null
OTOH, if you're in the US, the next step up in perceived national security threat might well see Protonmail getting blocked. Fastmail, with five eyes on it, maybe not so likely to just "disappear".
What about crypto, no javascript and no phone number?
Free email providers do the no javascript and no phone number thing.
It is like trying its hardest to collect your information
It reminds me of Nigerian scammers, they intentionally say ridiculous things to weed out people smart enough to walk away.
okay, then I'll do that in whonix.
regarding the payment I couldn't see how to pay in crypto and also get a simple captcha instead of SMS verification
I've paid Protonmail using bitcoin and that is all that was needed.
I just did the $4 plan right now, and it is asking for credit card, paypal. I do see the possibility of a gift code.
what am I missing here
also the captcha is not a possibility when I last tried over TOR. it was SMS only
Try switching to yearly and you should now see the option.
This is odd because my first monthly payment was effectively done with bitcoin (I wanted to try it out). This was some 10 months ago. Maybe it got changed in the meanwhile.