Best Encrypted Email Services for 2018
By Waqas
The year 2017 is gone but the hunt for the
This is a post from HackRead.com Read the original post: Best Encrypted Email Services for 2018
Continue reading Best Encrypted Email Services for 2018
Collaborate Disseminate
By Waqas
The year 2017 is gone but the hunt for the
This is a post from HackRead.com Read the original post: Best Encrypted Email Services for 2018
Continue reading Best Encrypted Email Services for 2018
By Waqas
The year 2017 is gone but the hunt for the
This is a post from HackRead.com Read the original post: Best Encrypted Email Services for 2018
Continue reading Best Encrypted Email Services for 2018
By Waqas
The world-renowned encrypted email service provider ProtonMail is back in the
This is a post from HackRead.com Read the original post: “ProtonMail Contacts” world’s first encrypted contacts manager is here
Continue reading “ProtonMail Contacts” world’s first encrypted contacts manager is here
There’s plenty of appetite for “hacking back,” but in many contexts it’s likely illegal for companies to retaliate against cybercriminals. Continue reading Email Provider ProtonMail Says It Hacked Back, Then Walks Claim Back
ProtonVPN recently posted on their blog about their Free VPN service.
You can use it by making a free account. But they don’t allow you to use protonmail for verifying your account.
Question 1. Why they don`t allow the free… Continue reading Why does ProtonVPN use non-proton email to register? [on hold]
Encrypted email service ProtonMail announced it was launching its own VPN, ProtonVPN, on Tuesday. Continue reading ProtonMail Launches Free VPN Service
By Waqas
Tutanota, an email encryption service is gaining popularity all across the globe and has seen a rapid growth since the start of 2017. In the past month, the company has gained over half a million users and is now celebrating 2 million users in total. After the Snowden leak, it became abundantly clear that different […]
This is a post from HackRead.com Read the original post: Encrypted Email Service Tutanota Celebrates 2 Million Users
Continue reading Encrypted Email Service Tutanota Celebrates 2 Million Users
I started to reverse engineer the ProtonMail system a bit and noticed that ProtonMail keeps all the ASCII armored private keys in their plain text form on their servers, and the only thing protecting them is the standard defi… Continue reading Is a secret PGP key considered compromised if it reaches the net?
I started to reverse engineer the ProtonMail system a bit and noticed that ProtonMail keeps all the ASCII armored private keys in their plain text form on their servers, and the only thing protecting them is the standard defi… Continue reading Is a secret PGP key considered compromised if it reaches the net?
Looking for an encrypted mail provider I checked ProtonMail and asked them why do they use “semi-random password salts (one random part, one non-random part)” compared to SRP 6a fully random salt. Got this answer:
The advantage is that in the event another service’s password database is compromised, and the user used the same password on ProtonMail and this compromised third-party service (don’t do this!), and that service uses the same hash algorithm we do, the attacker would not be able to impersonate the ProtonMail server in the SRP auth sequence, because ProtonMail clients know that the salt begins with a non-random sequence and check this, whereas the salt stolen from 3rd party service would not.
Now given that the client is Open Source, what is the point of this? They didn’t answer this one. I haven’t read the source, so I don’t know how it’s implemented, but does anybody know how it could enhance auth security?