proton-bridge

That isn't really fair. If you read the article, protonmail essentially supplied the FBI the recovery email of the account. This is metadata that protonmail must have that isn't encrypted by the user for obvious reasons. Regarding the "MITM" for every email sent, this is related to their "bridge" software which allows regular IMAP/SMTP software to use Proton Mail. This software must edit the emails to encrypt them in their scheme. This software is open source and can be inspected and/or built locally. https://github.com/ProtonMail/proton-bridge

> This appears to be related to a behaviour that ProtonMail has of dropping all plaintext email if any mime-encoded parts exist. https://github.com/ProtonMail/proton-bridge/issues/26#issuec... I'm actually more shocked knowing that they drop plain text if there is a mime-encoded part (e.g. HTML). Just verified that all mails imported from GMail and all newer mails I received in PM only have the HTML part now, while GMail shows both HTML and plain text parts in message source. Great, now if I want to use a text-only client to read those mails in the future, I won't be able to. Now I honestly wonder, how did they think this is something okay to mess up? Is there just no usable email hosting service for someone that want their mails not touched and also stored securely? Like, this is not even going to save storage space for PM - I'm paying f

Before anyone jumps ship on ProtonMail because they didn't read past the headline, by "Rewrites Your Emails, the author means that ProtonMail doesn't support user-applied PGP signatures because of the way they've decided to architect their automatic signing and encryption system. ProtonMail isn't rewriting outbound emails in the sense that the average person is probably thinking. If you're part of the 99.9% who doesn't sign their emails or verify signatures, this issue is unlikely to actually matter to you. That said, Proton's response to this issue is joke. https://github.com/ProtonMail/proton-bridge/issues/26

There is also a 2-year old issues: https://github.com/ProtonMail/proton-bridge/issues/180 Proton makes it hard for open-source software developer to send patches and they don't care. https://git-send-email.io/#step-2 Some quote from it. > Be advised that Protonmail is generally known to be a pretty bad email host. They will munge up your outgoing emails and your patches may fail to apply when received by the other end. Not to mention their mistreatment of open source and false promises of security! You should consider a different mail provider. Glad that I jumped out the ship only after one week so I can get full refund lol