So we get this before a proton drive client for Linux.......
Proton
Empowering you to choose a better internet where privacy is the default. Protect yourself online with Proton Mail, Proton VPN, Proton Calendar, Proton Drive. Proton Pass and SimpleLogin.
Proton Mail is the world's largest secure email provider. Swiss, end-to-end encrypted, private, and free.
Proton VPN is the world’s only open-source, publicly audited, unlimited and free VPN. Swiss-based, no-ads, and no-logs.
Proton Calendar is the world's first end-to-end encrypted calendar that allows you to keep your life private.
Proton Drive is a free end-to-end encrypted cloud storage that allows you to securely backup and share your files. It's open source, publicly audited, and Swiss-based.
Proton Pass Proton Pass is a free and open-source password manager which brings a higher level of security with rigorous end-to-end encryption of all data (including usernames, URLs, notes, and more) and email alias support.
SimpleLogin lets you send and receive emails anonymously via easily-generated unique email aliases.
Or the VPN client being anywhere near passable.... ffs proton
Why VPN client for linux? Wireguard configs can be made in browser gui and easy to deploy
A: I am lazy B: I am extremely lazy
Entirely different teams.
Nothing as secure as piping a url to a script into bash. /s
90% of the time, that's a valid concern, but you can always read the script first.
And also, if proton wanted to fuck you over, a malicious bash script isnt even a top 10 easy vector. Why trust them with encrypted email if you are suspicious of an install script?
90% of the time, that's a valid concern, but you can always read the script first.
It would be a best practice to read any script you want to run on your system. Although the installation instructions tell you to just pipe it into bash.
And also, if proton wanted to fuck you over, a malicious bash script isnt even a top 10 easy vector. Why trust them with encrypted email if you are suspicious of an install script?
My concern is not so much proton fucking you over. There are pleny of attack surfaces between you and the server you're downloading it from.
Installing software on your system usually lets you check a gpg signature or a hash if you're downloading a binary. This method provides no such thing.
A company concerned with security and encryption should know better.
Thanks for your work! I have a question though. I just installed it and signed in and it authenticated via a browser link. That works for SSHing from a desktop, but the page mentions it being good "In environments where the graphical UI cannot be used". Is it planned to allow for entering a password and 2FA code when where there truly is no GUI available?
Visionary customer here. This will get used absolutely immediately. Awesome features!
Getting quick access to autofill 1Password items in Alfred via the 1P CLI was one of the last feature parity nice-to-haves remaining to fully switch to Proton Pass. Great to see progress here.
I just use Rust Bitwarden(rbw) its works pretty well & I can host my on thing.