im pretty sure they turned over ip of a french activist (not 100% sure) and when i was checking them out there tor mirror just linked to the clearnet site wich put me off so based on your threat model they can be ok

I'm tired but:

• you'd need to compare the checksums of their web-based cryptography at every login,
• you could use their bridge but you'd need to give your OpenPGP passphrase to change your settings, for no reason
• they have the CIA at their administration council,
• they have an history of unethical behavior toward Twitter survivors,
• they have an history of spreading conspiracy theories,
• they have an history of contacting hosting providers asking them to remove blog posts,
• they didn't share the Lavabit fundraiser so they could get quietly issued a US National Security Letter (overriding the First Amendment and preventing Ladar from appealing),
• they can access to your entire mailbox anyway, not just to the email contents,
• this has enabled the arrest of Social and Climatic Justice activists, they replied they couldn't resist a Swiss court order (so that's not their fault I guess, the tech is just bad)…

Why would you trust them for your opsec, and why would you enable them further?

Alternatives include Disroot, Nubo, and Zaclys.

#Proton #ProtonMail

Not giving my business to a Trump supporter.