It has been admitted. So they DO log your IP address when you use their service. So their customers have been lied to and have their privacy at risk. They cannot be trusted.
So how long have ProtonMail kept this massive lie from its users then?
So how long have ProtonMail kept this massive lie from its users then?
> under Swiss law, Proton can be forced to collect information on accounts belonging to users under Swiss criminal investigation. This is obviously not done by default, but only if Proton gets a legal order for a specific account.
So I assume normally IP addresses aren't logged. But they can enable IP address logging for specific accounts when ordered to do so.
There is very little practical difference in the protection that gives users, but seemingly the privacy policy was technically correct.
You probably should have picked a different account than mine to try this particular line with.
...I have no way of verifying it then I don't believe them. Worked pretty good so far.
This can't possibly be true since one can't verify everything. If one truly lived this then they'd be in an endless quest of verifying things. For instance, verifying verifiers.
We are about to enter into an age of hard to detect AI generated articles and research so this isn't philosophical silliness.
IMO a breach of trust would be actually logging IPs by default and before a legal request is made.
>The firm's privacy policy, which was updated yesterday, now says: "If you are breaking Swiss law, ProtonMail can be legally compelled to log your IP address as part of a Swiss criminal investigation."
That makes it sound like they normally do not / did not log the IP, but then got orders from the police the log these particular IPs.
I was even considering switching to them...
As far as I understand according to several comments I read here in HN "99%" of the people don't understand what "by default" means, making the sentence misleading for most.
Throwing in a word like default changes the entire meaning.
Instead of we don't log anything*
* we log only when requested
They should say your ip can be logged.
It's like saying in big headline.
No meat burgers *
* meat means carots
their users were too fanatical over "Swiss laws" to pay attention, going as far to demand proof when observers were merely pointing out the fundamental flaw in the Protonmail concept and incongruent advertising
well, now there is proof