Post #1454211

2025-01-31 19:18 UTC

Thanks for sharing. I think this is a concern because if they did it for mail, would they do it for the VPN? I would be more concerned if it turned out the VPN logs were turned over. Because in that seems like a much bigger issue.

Replies (1)

@Telorand@reddthat.com 2025-01-31 21:59

It's worth noting that, as far as I'm aware, they're still completely logless on the VPN. The way most VPNs get around the law in that regard is by storing log data in memory. This prevents any LEOs demanding logs, because the second the memory is refreshed or goes through automatic garbage collection, any "logs" that might exist to facilitate the function of the software are already gone. Essentially, there's nothing to collect or turn over. The reason they could turn over that one user's IP data is because email, by its very nature, *has to be* stored for long term retrieval. They might still store as little identifying data as they can, but with email, you should always assume they have your IP at a minimum. Thus, whether you use ProtonMail or Tuta or whatever, you should be using a logless VPN or TOR if you're trying to stay anonymous. That way, even if the email provider is legally compelled to turn over IP data, it can't be traced back to you.

Open ##1454212