How can we improve ProtonMail?

Stop using JAVascript for your new onion link. JavaScript undermines the anonymity of TOR

The name says it all really, stop using JavaScript for the onion site as it can completely undermine the security The Tor Project provides, I know for a fact there's a community that wouldn't use it due to that.

184 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    I agree to the terms of service
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    JihnJihn shared this idea  ·   ·  Admin →

    4 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      Submitting...
      • Anonymous commented  · 

        perhaps a firefox plugin would allow to move the required javascript to a more secure channel?

      • 13d13d commented  · 

        Couldn't they implement the decryption as an extension/plug-in/add-on for TOR?

      • John DoeJohn Doe commented  · 

        Sorry to break it to you, but one cannot decrypt PGP on the client side without JavaScript. This would break end-to-end encryption.

        Too bad we don't have an option to downvote this suggestion!

      • Anonymous commented  · 

        Before you vote for this, you should come up with a plan for how ProtonMail will decrypt messages client-side without JavaScript.

      Feedback and Knowledge Base