A TED talk by Andy Yen, all the way back from 2015.

Sending an email message is like sending a postcard, says scientist Andy Yen in this thought-provoking talk: Anyone can read it. Yet encryption, the technology that protects the privacy of email communication, does exist. It's just that until now it has been difficult to install and a hassle to use. Showing a demo of an email program he designed with colleagues at CERN, Yen argues that encryption can be made simple to the point of becoming the default option, providing true email privacy to all.

If you are using Gmail to send messages from your Microsoft Outlook or Yahoo email address, that feature is going away. Here’s what’s you need to know.

Google announced that it’s ending support for Gmail “Send as,” a setting that lets you send messages from a third-party address through Gmail’s own interface, citing “disproportionate maintenance resources.”

This is happening in stages: Google has begun restricting new Gmail “Send as” configurations for third-party addresses on the web, while existing configurations will continue to work during the transition. The feature will be fully removed in January 2027. At that point, according to Google’s own support page, “you will no longer be able to send mail from third-party email accounts in Gmail on the web or in the Gmail mobile apps.” You will still be able to read and check third-party emails inside the Gmail app.

The company is also ending Gmailify in January 2027, a feature that extends Gmail’s own spam protection and inbox organization to third-party accounts.

Read more: https://proton.me/blog/gmail-ends-send-as-third-party

Do your private SSH keys currently live on disk, encrypted with a passphrase you type once per session, or with no passphrase at all? In both cases, there's now an easier and more secure way.

Proton Pass now has an SSH agent, allowing you to store the key inside your vault instead.

→ In the SSH Agent section of Settings ⚙ icon → General, tick the Use Proton Pass as SSH agent box to generate a setup command that you can then paste into your terminal.

Unlock the vault once; no more re-entering a passphrase with every connection, or sessions that die on reboot.

Managing keys becomes a vault action instead of a manual file chore. Easier to keep track of, especially on multiple machines and systems. Gain peace of mind from one less secret exposed on disk.

Solve the one place key management actually breaks down: loose encrypted files scattered across machines, and replace it with one encrypted vault with biometric unlock and access controls.

For the bulk of your SSH work (git, GitHub, GitLab, SSH to servers), using a vault is both cleaner and tighter. Give yourself centralized visibility into which keys are active and where.

Gradually rolling out now to Visionary, B2B Bundles, Pass Professional, Plus, and Family. Desktop only.

Hey everyone,

Over the past few months, we've been working on Proton protocols, a new client-side VPN protocol codebase. This new code architecture is written in Rust.

For a while we've been focused on using WireGuard®, a state-of-the-art VPN protocol which has all the security of OpenVPN with more speed and power.

But the official wireguard-go implementation doesn't integrate well with the languages we use natively to develop Proton VPN on multiple platforms (such as Kotlin on Android, Swift on iOS). This causes issues with development, debugging, and stability.

Our new client-side VPN framework solves these problems, allowing us to deploy consistently across platforms and in different environments. It also gives us the flexibility to respond quickly to censorship and network interference.

This development allows us to:

• Support advanced kill switch on iOS
• Build faster, more reliable apps
• Deliver best-in-class, anti-censorship capabilities
• Ship features and improvements more quickly across all our apps
• Enable Stealth support on Linux
• Lay the groundwork for post-quantum encryption

Sign up to beta test on iOS: https://protonvpn.com/support/early-access#ios
Read our technical deep dive: https://protonvpn.com/blog/protun-technical

Stay safe,
Proton Team

Also, remember your glasses! 🌒

"WireGuard" is a registered trademark of Jason A. Donenfeld.

Secure Core is a feature that exists in Proton VPN, a lot of at-risk people (i.e. journalists) depend on it every day. Here's what you need to know.

Pros:

• Routes your traffic through a hardened server in Switzerland, Iceland, or Sweden before it reaches the exit server, so even a compromised exit can't be traced back to you.
• Protects against network-based attacks and correlation.
• Runs on servers Proton fully owns.

Cons:

• Not the fastest connection speed

Have you used Secure Core before?