ProtonMail doesn’t encrypt all emails “by design”

23,237
10
Published 2022-01-06
In this episode, we explore why ProtonMail doesn’t encrypt all emails “by design”.

==============================
SUGGESTED
==============================
How to encrypt, sign and decrypt messages using GnuPG on macOS 👉    • How to encrypt, sign and decrypt mess...  

==============================
LINKS
==============================
Password policy series 👉    • Password policy series  
How to generate and air gap PGP private keys using GnuPG, Tails and YubiKey 👉 github.com/sunknudsen/privacy-guides/tree/master/h…

==============================
SUPPORT
==============================
Support this channel 👉 sunknudsen.com/donate

All Comments (21)
  • @andrewevans7184
    I am one of those people who had no idea that my emails were not encrypted using Proton. Now I know why and how to change it. Thanks for all the work you put into these videos and the privacy guides
  • @MrHUNKDeath.
    Protonmail works like Signal, to send an end-to-end encrypted message, the recipient must also use Protonmail, the little padlock at the bottom left to encrypt is reserved for recipients who do not have addresses on Protonmail, the problem arises when it comes to sharing the password, same thing for PGP keys, when you understand how messengers that use encryption work, it's obvious and it's always the same principle, but it's true that their slightly misleading advertisements could make you think that everything is encrypted by design, when it depends on how you use it. Thanks for this video Sun.
  • @tobiaskaspar
    It‘s so interesting, that so many people dont understand „end-to-end encryption“ and how asymetric cryptography works. However, it works wonderful from proton to proton and with PGP. Well done sun, to explain this again.
  • I think privacy advocates have had a good time beating on Protonmail and services like it for some reason. I look forward to a future in which every privacy critique starts with, "The internet as a whole, and by extension, e-mail, was never designed with privacy as a goal. The internet is a giant copy machine and it wants to move data around from computer to computer, and e-mail is a quintessential part of this. If you are going to use e-mail, this is how you can make it less horrible when it comes to privacy, but less horrible is all you're going to get." You see similar attacks on VPNs. The assumptions people make about why I use a VPN and what I expect from it always irritate me. This is a good video. It is something everyone should understand before using Protonmail.
  • @e-vd
    Very important subject - thank you
  • @dougbas3980
    Opened my eyes Just what I needed to know. Thank you
  • @mdmmecutube
    Thanks for this video. This really clarified how email encryption works.
  • @RCohle452
    End to end encryption only works when the recipient is using the same service as you.
  • @Chris-ew6cg
    Protonmail doesn't encrypt its mail between non protonmail users by default but it does encrypt mail between 2 protonmail users by default(Idk if it works when mailing multiple protonmail users though). Afaik this is mostly coz proton has access to the all of its members public keys but does not have for mail ids not under their domain, this behavior can be duplicated with non protonmail users as well by the few steps you mentioned but which are unknown to majority of users. So thanks Sun for making this knowledge mainstream, your few hours of efforts will definitely make several users communicating over email much more private.
  • You may have less subs for now, but boy you have great content! May your tribe increase with each passing day 🙏🏻🙏🏻😊
  • @user-kp6ky7ru2m
    Thanx for this video! Do you have some info about Utopia Ecosystem ?
  • @FruityHachi
    but does the other person how to do this encryption setting on their end too for it to work? or is it enough if only 1 person does this? I imagine that it's difficult of one person is not that tech savvy
  • @tigerdigs8228
    What’s best one to use for files that need to be secured?
  • @QuarKSonTV
    Great video as always, is next meetup on jitsi in plans?
  • @AjayPrashar
    I noticed an anon comment below stating "End to end encryption only works when the recipient is using the same service as you." I would think that this statement is NOT true as PGP encryption protects anyone that is able to encrypt the mail using their public key and decrypt a message using their private key while others that do not have a private key would never be unable to read it in plain English. End-to-End encryption, to me means PGP encrypted but to others it may mean encryption during transport but not encrypted at the end-points when stored. Also, how does non-PGP encryption tie into this conversation? For example in Proton mail says: < Message Storage * All messages in your ProtonMail mailbox are stored with zero-access encryption. This means we cannot read any of your messages or hand them over to third parties. This includes messages sent to you by non-ProtonMail users, although keep in mind if an email is sent to you from Gmail, Gmail likely retains a copy of that message as well. * Messages sent “Encrypted for Outside” are also stored end-to-end encrypted. * Subject lines and recipient/sender email addresses are encrypted, but not end-to-end encrypted. > So the encryption conversation can be at a sender-to-recipient level (PGP), transport (TLS), and storage (ZeroAccess). My apologies if I am incorrect in my understanding of what "by design" is referring to or the technologies involved. I appreciate you and your channel. -Ajay
  • @abc-co7fy
    Thanks, I was ignorant about this and believed what they display in website . OMG, what a terrible mistake.
  • @SUEMORIN-ly3hg
    How do I remove encryption on my email. It did it and I can't read my emails