As I only ever heard that the recovery address is passed on to law enforcement by Proton, I am fine with trusting ProtonMail. Don't set a recovery mail/phone number, use a VPN/Tor and you should be fine.
Unless you can provide an instance where actual mails were handed over to law enforcement.
Once the recovery email was revealed anonymity is lost and that would lead to coercion in many direct ways. They should have not complied and gone to court. Proton should have never claimed privacy if they were just going to hand over information
Yes, perhaps they should have gone to court over it but I doubt the court would have ruled in their favor. All of this proves that their encryption works and they actually do not have a way to bypass it themselves. However it also proves that many people don't think about linking a supposedly anonymous email account with their real name recovery email.
If you don't do that there is no known threat against your data at protonmail.
Oddbean new post about login | logout 