Hacker News Reader

>In ProtonMail’s one-password mode, the mailbox password is derived from the login password via a one-way cryptographic password hash.

I wonder what the password change procedure will be when you have several gigabytes of mail in your mailbox? Would you have to download every message, re-encrypt it in your browser and send back?

View on HN

Hopefully the mailbox encryption key is actually static, and they only store it encrypted with a key derived from your login password. If you use two different salts the knowledge of the login pw hash does not yield the mailbox key encryption key.

The mailbox encryption key is static. There is no need to re-encrypted all the mail when it is changed. Since the PGP Secret Key is only decrypted in the client browser or app, there is no need to transmit the decryption password to the server.

Reply on news.ycombinator.com