Pascal Schärli

I found new ways how Proton could read your data: https://schaerli.org/5/

- Desktop clients auto-update without signature checks or user permission
- Key Transparency was never active on ProtonPass despite being advertised
- Key Transparency for all apps is broken and does not protect against MITM attacks

Proton's crypto is not Transparent and not OPAQUE

Proton says privacy "isn't a promise, it's mathematically ensured." I found new ways they could read your data anyway.

Jun 23 at 2:13pmWeb