Protonmail now keeps IP Logs(schneier.com) |
Protonmail now keeps IP Logs(schneier.com) |
The message used to be "we don't keep IP logs" and now it's the opposite.
I'd be willing to bet 99% of services that say they don't log your IP, actually log your IP in some form. You're telling me all these companies just discard webserver logs? No chance.
[0] https://github.com/foxcpp/maddy
[1] https://github.com/LukeSmithxyz/emailwiz
[2] https://github.com/iredmail/iRedMail
Peer to peer services with encrypted communications are impossible to centrally control and monitor.
Regardless, they are not suitable replacements for email.
"They therefore sent a requisition (via EUROPOL) to the Swiss company managing the messaging system in order to find out the identity of the creator of the address. ProtonMail responded to this request by providing the IP address and the fingerprint of the browser used by the collective."
It looks like the Swiss police responded to a request that could not be fulfilled (creator's ip) by getting something ~equally good (most recent ip) through asking protonmail to enable IP monitoring and the resulting report shown redacted on TC looks like a normal subpoena response where the data was already available.
This does not really look like the back and forth seen with authorities first trying to request the impossible in a subpoena (i.e. famously from lavabit but also from any cloud provider) but that level of adversarial ~obstruction through precise compliance might not be possible in Swiss law.