519
Proton Mail Discloses User Data Leading to Arrest in Spain
(restoreprivacy.com)
This is a most excellent place for technology news and articles.
They provided the backup e-mail address
Just in case anyone thinks they decrypted mails and handed them over, nope. I hadn't thought about that "settings" are not encrypted. Guess if you want to stay anonymous you shouldn't add your private mail address in there as a backup.
Yeah. Even if they couldn't hand over recovery emails, having a personal email as a backup to a "private and sensitive" email account is bad practice.
But what do you do if that field is needed? A throwaway address won't work as it's easy to recreate. Buy your own domain and run a server?
Proton doesn't require recovery. But if you want recovery without email addresses, there're multiple different ways from recovery phases to recovery phone number to even an encrypted recovery file you download onto a local device.