Better describe Proton Drive threat model (#335)

Signed-off-by: Daniel Nathan Gray <dng@disroot.org>
This commit is contained in:
Tommy 2021-11-18 09:19:14 +00:00 committed by Daniel Nathan Gray
parent 29f717b651
commit efa9b5f1cc
No known key found for this signature in database
GPG Key ID: 41911F722B0F9AE3

View File

@ -6,7 +6,7 @@ description: |
Proton Drive is currently in beta and only is only available through a web client. Proton Drive is currently in beta and only is only available through a web client.
When using a web client, you are placing trust in the server sending you the JavaScript code that encrypts your files. When using a web client, you are placing trust in the server to send you proper JavaScript code to derive the decryption key and authentication token locally in your browser. A compromised server can send you malicious JavaScript code to steal your master password and decrypt your data. If this does not fit your <a href="/threat-modeling/">threat model</a>, consider using an alternative.
website: 'https://protonmail.com' website: 'https://protonmail.com'
privacy_policy: 'https://protonmail.com/privacy-policy' privacy_policy: 'https://protonmail.com/privacy-policy'