Account Activity: Due to limitations of the SMTP protocol, we have access to the following email metadata: sender and recipient email addresses, the IP address incoming messages originated from, attachment name, message subject, and message sent and received times. We do NOT have access to encrypted message content, but unencrypted messages sent from external providers to your Account, or from Proton Mail to external unencrypted email services, are scanned for spam and viruses to pursue the legitimate interest of protecting the integrity of our Services and users. Such inbound messages are scanned for spam in memory, and then encrypted and written to disk
Great point. I knew it came in unencrypted, didn't realize they scanned it. Great find
To be clear.
They scan both sent and received.
"from external providers to your Account, or from Proton Mail to external unencrypted email services"
Thats the way all emaill providers are doing. Nothing special here 😉
Yes, but many people assume that Protonmail is special.
This is mostly marketing gibberish.
Using GPG/PGP or DeltaChat with Gmail is more secure than using ProtonMail with external providers.
Don't use GMail JFC
I don't use it. I wrote that Gmail with Delta Chat or GPG was more secure that Protonmail or Tutanota.
GMail is a horror with privacy. Proton is much much better
Start using GPG or Delta Chat
Oddbean new post about login | logout 
