If the owner of the standard notes will now be a proton, doesn’t that contradict this principle? I have a proton email account but I don’t want it linked to my standard notes account. I don’t strongly trust companies that offer packaged services like google or Microsoft. I prefer to have one service from one company. I am afraid that now I will have to change where I save my notes. What do you guys think about this?

  • Dark Arc@social.packetloss.gg
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    2
    ·
    edit-2
    7 months ago

    Proton is a greedy company that doesn’t like interoperability and likes to add features designed in a way to keep people locked their Web UI and applications.

    That’s nonsense. Proton has built everything around PGP and allows uploading public keys for users not using Proton Mail so that you can messaging them with Proton’s PGP system automatically.

    https://proton.me/blog/openpgp-crypto-refresh

    There’s 0 vendor lock in (in the entire Proton ecosystem) and there’s tons of open sourced code.

    • LWD@lemm.ee
      link
      fedilink
      arrow-up
      3
      arrow-down
      4
      ·
      7 months ago

      There’s 0 vendor lock in (in the entire Proton ecosystem)

      What definition are you using for lock-in? Because I’m pretty sure the Proton ecosystem qualifies to some degree.

      • Dark Arc@social.packetloss.gg
        link
        fedilink
        English
        arrow-up
        16
        ·
        edit-2
        7 months ago

        Q: Can I get the information I put into Proton back out and move to another service without paying Proton any money or extreme hardship?

        A: Yes.

    • TCB13@lemmy.world
      link
      fedilink
      arrow-up
      4
      arrow-down
      7
      ·
      edit-2
      7 months ago

      There’s no vendor lock in until you realize your emails are essentially hostage of their apps and a bridge that may be shutdown at any point. If you can’t simply setup a regular email client then there’s vendor lock in, not even Microsoft does that.

        • TCB13@lemmy.world
          link
          fedilink
          arrow-up
          2
          arrow-down
          9
          ·
          7 months ago

          Yes, but you can reliable use their service with a generic email client, specially on iOS for instance. The bridge doesn’t even provide everything a IMAP server does and there’s isn’t a way to get get calendars and contacts.

          That bridge and the fact they don’t use generic IMAP/SMTP/CardDav/CalDav is a form of vendor lock-in. Other providers are also capable of encrypting email with PGP on a open manner and still use those generic protocols.

          • Dark Arc@social.packetloss.gg
            link
            fedilink
            English
            arrow-up
            10
            arrow-down
            3
            ·
            edit-2
            7 months ago

            Other providers will return garbage to your mail client. The mail client itself must have PGP capability (plenty don’t).

            The bridge doesn’t even provide everything a IMAP server does

            I’ve yet to find any functionality missing from the bridge’s IMAP server that’s present in any other IMAP server.

            and there’s isn’t a way to get get calendars and contacts.

            There’s not currently a real time way to get that data, but it’s hardly “vendor lockin.”

            specially on iOS for instance

            There’s something ironic to me about chewing Proton out for alleged vendor lock in while using iOS / Apple products.

            • TCB13@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              1
              ·
              edit-2
              7 months ago

              There’s not currently a real time way to get that data, but it’s hardly “vendor lockin.”

              You got there yourself, that’s one of the problems.

              There’s something ironic to me about chewing Proton out for alleged vendor lock in while using iOS / Apple products.

              I used iOS as an example, for Android you can get a bridge but that’s just going to be one more thing going for your battery.

              Now, consider this, there’s a TON of situation where having a standard SMTP-capable provider is interesting. Maybe you’re running in iOS, maybe you want to have an ESP32 to send a few emails, or some custom software in your computer. All those use cases are impossible or require more coding and more non-standard solutions just because Proton decided to be the first provider ever not to use standard protocols.

              What Proton is doing to e-mail is about the same that WhatsApp, Messenger and others did to messaging - instead of just using an open protocol like XMPP they opted for their closed thing in order to lock people into their apps. People in this community seem to be okay with this just because they sell the “privacy” cool-aid.

              • Dark Arc@social.packetloss.gg
                link
                fedilink
                English
                arrow-up
                1
                ·
                edit-2
                7 months ago

                instead of just using an open protocol like XMPP they opted for their closed thing in order to lock people into their apps

                That’s just not true, you’re severely misinformed on this.

                Proton took the established practice of PGP encrypted email and put it in a nice package. That’s why you can add public keys and just message somebody that’s using Thunderbird.

                There is no “open protocol for end to end encrypted email”, XMPP is not applicable here. There’s no “IMAP for PGP” there’s just IMAP, so they made a bridge so you can use IMAP even if your mail client doesn’t support PGP.

                Could they have made an IMAP server that returns the PGP emails and requires your mail client to handle the decryption? Yes. However, that goes against a major selling point of the product which is that it manages all that encryption for you (like a password manager). Nobody in their right mind would use that.

                This isn’t some matter of privacy coolaid and fanboyism; they did the open interoperable thing. You can even (as an example use case) if you’re a new customer that was doing PGP email on your own, upload your own existing PGP key, and use that with Proton if you don’t want to change the PGP public key people use to send you email.

                Edit: Perhaps you’ve been confused by some falsehoods coming from Tutanota or confused the two https://proton.me/blog/proton-vs-tuta-encryption

                • TCB13@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  7 months ago

                  I wasn’t even aware of those alleged falsehoods coming from Tutanota…

                  IMAP server that returns the PGP emails and requires your mail client to handle the decryption? Yes.

                  Essentially my point.

                  . However, that goes against a major selling point of the product which is that it manages all that encryption for you (like a password manager). Nobody in their right mind would use that.

                  Why not, if they actually do everything with open standards and by the book, why can’t they provide IMAP/SMTP access to everyone who wants BUT add the disclaimer that you’ve to use a PGP compatible e-mail client and configure it to deal with the encryption… but they don’t and that is a red flag. Most of their users are tech savvy people wouldn’t oppose setting that up.

                  • Dark Arc@social.packetloss.gg
                    link
                    fedilink
                    English
                    arrow-up
                    1
                    ·
                    edit-2
                    7 months ago

                    Because you’re paying them so you don’t have to do that. Why would you pay them a premium if you’re just going to do it yourself anyways?

                    Also that costs money to develop, maintain, and run. Which takes money/resources away from things most customers care about.

                    There aren’t red flags here, everything is open source, this is all verifiable information. You’re just refusing to accept that.