Conversation

Everything needs Two Password Mode, like

It only takes a second to export an entire mailbox or DM history. If it was a subpoena rather than a hacker, you might never know you were compromised. Clear your history/trash regularly or go e2e. protonmail.com/support/knowle

alex botteri

@alex_botteri

Jul 15, 2020

Protonmail is not a safe data custodian...at all

Quote Tweet

alex botteri

@alex_botteri

· Jun 19, 2017

Replying to @alex_botteri @ProtonMail and @ringmemaybe

My @protonMail email -> alex@protonmail.ch got hijacked by ... ProtonMail itself. Talking about #Security #Trust

Jesse Powell

@jespow

Jul 15, 2020

wow wtf? That's horrible. It is a massive security problem to release email addresses to be taken over by other owners. If you run an email service, you have to make addresses permanent, even if people don't seem to be active. Charge up front if you don't want squatting.

alex botteri

@alex_botteri

Jul 16, 2020

Indeed. And the inactivity excuse is ... BS. I received hundreds of emails on that address, mainly by senders mistakes as the alias was very common: alex@. Still, the Protonmail team had no way to know that.

Proton

@ProtonPrivacy

Jul 16, 2020

Paid accounts are not subject to the inactivity rule. In general, we are not enforcing the inactivity (no login) rule, but we do reserve the right to enforce this in our terms and conditions. Most services actually do remove inactive, non-paid accounts. We try not to.

Replying to

and

Such a rule means you have to pay for eternity because you can’t afford the consequences of someone else taking over your name when you can no longer afford it or change service providers. Should be if ever paid, never reassign the name.

9:02 AM · Jul 16, 2020Twitter for iPhone

Likes

This Tweet was deleted by the Tweet author. Learn more

Jesse Powell

@jespow

Jul 16, 2020

I agree, which is why those vanity names should be auctioned off or have a steep up front purchase price. Unless it’s an email I’m giving out regularly to strangers, I prefer something longer and unguessable for spam control, anyway.