Proton Mail discloses user data leading to arrest in Spain
Proton Mail’s cooperation with Swiss authorities in a case that led to an arrest in Spain has reignited debate over what “private” email can realistically protect users from. Commenters note that while Proton encrypted mailbox contents and only handed over metadata like a recovery email or IP address under court order, this was enough for police to unmask the user once Apple and telecom records were added. The exchange highlights a broader tension between privacy vs. anonymity, legal obligations vs. marketing promises, and how much ordinary users can safely rely on tools like VPNs, Tor and “secure” providers when facing state-level adversaries.
Legal and Case Context
- Proton is subject to Swiss law and only responds to Swiss authorities; foreign police must route requests through Swiss channels.
- Data are disclosed when the alleged act is a crime in both the requesting country and Switzerland (e.g., terrorism, espionage), not for things legal in Switzerland.
- In this case, Proton provided a recovery email; Apple then supplied name, address, and phone linked to that email, and telcos confirmed the phone subscriber.
- Some recall a prior French case where Proton was compelled to log and hand over a user’s IP; Proton later sought a Swiss ruling to limit such logging orders.
Expectations vs. Reality of Proton’s Privacy
- Many argue Proton’s marketing (“safe in Switzerland”, “secure private email”) leads users to overestimate protection against governments.
- Others stress Proton has always said they follow Swiss law, can hand over metadata and recovery data, but cannot read mailbox contents without additional compelled measures.
- Distinction emphasized: privacy (shield from marketers / casual snooping) vs anonymity (shield from state-level actors). Email is seen as structurally bad for anonymity.
Recovery Email and Opsec
- Thread highlights how a recovery email is a major link back to real identity, especially when it’s an Apple/Google address.
- Some say serious activists should never use recovery emails or identity-linked VPNs; convenience features and strong anonymity are fundamentally at odds.
Logging, VPNs, and IP Privacy
- Debate over “no-logs” VPNs: some cite Mullvad and others that allegedly withstood police raids; others doubt such claims or point to ownership changes.
- Consensus that IPs and assignment logs are widely retained and considered personal data, at least for state actors.
Cryptography and Client Trust
- Several note that although Proton can’t see stored email contents, they could be compelled to capture future messages or serve a modified client, depending on Swiss law.
- Proton engineers in the thread explain: keys are generated client-side, encrypted with password-derived keys, and stored encrypted; open-source clients exist.
- Discussion of PGP complexity, subkeys vs master keys, and Proton’s support for importing subkeys (e.g., via GNU “dummy” keys).
Comparisons and Broader Takeaways
- Some compare Proton favorably to Gmail/Outlook for avoiding ad mining but not as a tool for serious anti-state activities.
- Others mention Tuta, Posteo, Fastmail, and self-hosting as alternatives, each with tradeoffs (export, key handling, jurisdiction).
- Recurrent theme: don’t expect any legal company to defy lawful orders; for high-risk threat models, use truly anonymous channels or non-digital methods.