Authentication attempts cannot be replayed, and the protocol remains secure even if a third party is actively trying to tamper with it.
We use a protocol known as Secure Remote Password (SRP), which mutually authenticates both the user and server without ever sending any password-equivalent data over the network. Security at Proton starts with account authentication. To protect your privacy Proton uses multiple layers of encryption. Why is data recovery technically difficult? We rolled these technologies out some time ago, but many people have asked us how they work, so today we’re explaining how we enable data recovery with end-to-end encryption. Making it possible to recover data if you forget your password is one of the toughest technical challenges presented by our use of end-to-end encryption, and we had to develop several innovative solutions. This is an additional difficulty that most other online services don’t need to worry about, but we view it as an integral part of building an internet where privacy is the default. Any recovery system we use must maintain your privacy, which means we must develop recovery methods that are compatible with end-to-end encryption and prevent our servers from ever having access to your information. Most other services can restore your data to your account because they can easily access it whenever they want. This is good for your privacy but can make data recovery difficult if you forget your password. Whether you’re using Proton Mail (our encrypted email service), Proton Drive (our encrypted file storage service), or any of our other services, your data is encrypted on your device before it reaches our servers, meaning not even we can access your data. This type of encryption makes it impossible for anyone to access your information besides you and the people you share it with. To do that, we’ve built all our services around end-to-end encryption. Proton’s mission is to build a better internet where privacy is the default.
0 kommentar(er)
