Comment by alephnerd
1 day ago
They should add Secure Drop support [0] - it's what Bloomberg, NYT, Washington Post, Politico, NOYB, etc use for anonymous tips.
Email runs the risk of de-anonymization, as most people don't know about Proton, and this very much falls close to whistleblowing.
Also, anyone who seriously wishes to say anything should probably NOT respond via IG or even follow the page. If you are whistleblowing, maintaining anonymity is critical.
> Email runs the risk of de-anonymization, as most people don't know about Proton
Proton is not perfect. They have surrendered recovery email addresses to law enforcement [1] and endorse Republicans through their official social media accounts [2].
[1] https://protos.com/protonmail-hands-info-to-government-but-s...
[2] https://theintercept.com/2025/01/28/proton-mail-andy-yen-tru...
That is not factually correct. For 1, Proton had to comply with a Swiss court order in the case of the French terror suspect. The user could have avoided having a recovery address in Proton, especially not an Apple one. Apple is the company who led to their arrest.
Read more here: https://proton.me/blog/climate-activist-arrest
For the 2 point, again Proton didn't endorse Republicans on official social media accounts. Their CEO agreed with the anti-trust nomination Gail Slater on his personal X account.
Also read more here: https://medium.com/@ovenplayer/does-proton-really-support-tr...
Imho you're just spreading FUD. Single source support is not the real truth.
Next time, it is worth disclosing that you work for Proton's PR department.
> Proton had to comply with a Swiss court order
I agree this isn't Proton's fault, but that does not change the fact that it happened and lead to an arrest. It is difficult to make a Proton account anonymously without providing a recovery email (it seems they use this as an anti-spam measure when you're using a VPN or Tor), so imo this is an important point.
> Proton didn't endorse Republicans on official social media accounts.
Yes, and... How do you know who "they" are?
(Just a little infosec devil's advocate.)
Very good question that should be asked.