Hacker News Reader

I feel like it's not true that their services are end-to-end encrypted. I mean, they are, but they have the encryption keys so it's the same as if they are not.

https://news.ycombinator.com/item?id=29103056 https://encryp.ch/blog/disturbing-facts-about-protonmail/ https://news.ycombinator.com/item?id=17775326 https://news.ycombinator.com/item?id=28057433

View on HN

It's open source so the E2EE can be (and has been) independently verified. The crazy CIA/NSA conspiracy theories are also quite easily debunked, see here: https://www.reddit.com/r/ProtonMail/comments/14demhj/debunki...

The encryption keys are encrypted using your password. Its the same as your phone.

Exactly. Your encryption key is stored encrypted so that we have no access to it. It is decrypted when you enter your password. We don't have access to your password, only an encrypted hash of it, so that our systems can recognize it. We cannot derive your password back from the hash.

Reply on news.ycombinator.com