Maybe. Not even sure. Thanks though. Might be that

It took two days on my phone. FF was green on my laptop. Both updated. Don’t know the mechanisms that can explain the differences.

Cc @SlurpingPus@lemmy.world

Firefox (nightly and regular) and duckduckgo is vulnerable on my phone. Brave and chrome are not.

I use ff so o hope they clean it up fast

I like briar for sure. Mostly because it might work if the internet goes blip, and you only have p2p. But… It’s in maintenance mode, exactly because its not easy to use.

Signal is probably best, since it has volume to hide in, and it’s difficult/ impossible to screw up. Partly because it’s centralized. Which is the problem with e.g mateix protocol - each node can configure thi gs a bit differently. Also why you should use the official app imo.

This is a decent walk through: https://www.privacyguides.org/en/basics/email-security/

But simple duckduckgoing can provide much more

https://5blockchains.com/posts/pgp-vs-signal/

https://ubos.tech/news/pgp-encryption-security-crisis-why-cryptography-needs-modern-alternatives/ (feels a bit clanker like - but info is legit)

Yes. There is controversy about the CEO. But mostly for me: is security theater. And in don’t trust them. Email will never work as a secure communication layer. Stop pretending it will. There a reasons which is tied to the protocol level, that make pgp non sufficient. There are also the pgp technology it self (no forward secrecy, no deniability, key management etc). Then there is the obvious fact about an email from proton to gmail, and 99% of other email providers, simply not being secure/encrypted. So you buy a privacy tool, which neglects to tell you: we actually don’t provide privacy at all - unless you treat proton emails as proton chat - strictly proton to proton… at which point youd be better of with e g signal.

If you insist: mailfence.org allows you to upload and control you own pgp keys. That’s interoprational with proton. Simarly priced i think, also Schweiz, and a bit more honest and strict imap (no bridge). But honestly… stop treating email as secure.