Proton Drive just updated to allow for edit/view privileges based on email: Proton Drive introduces new sharing features for more security and control | Proton
3 Likes
I just saw that when I was sharing a document this morning, useful feature!
1 Like
Send securely: Recipients will receive an email with a unique secure link to access the shared files. This ensures that only the intended recipients can open the link.
I did some further testing into this feature, since I wanted to see how well their implementation protected against link resharing.
Using my Proton Drive account, I invited a Gmail user to have edit access.
The Gmail user got an email from no-reply@drive.proton.me saying “[proton username] shared an item with you”.
When the user opens the link, it prompts them to create a Proton account for that email.
Obviously, there is no perfect way to prevent the resharing of materials that you have shared with someone, but Proton’s implementation helps to prevent link resharing since it requires an account.
I also tested that earlier. It’s a good way of doing this imo. It’s either accessible by link or more securely via email on account, and anyone can just create on on invite easily. When I worked on e2ee file transfer software myself I did similar implementations.
I’ve just tested this as well and it doesn’t seem to work. I shared a file with a gmail address. The the gmail user clicked the link and created an account. Then the sharer got an email asking to confirm access grant. I clicked that link, but still nothing visible to the gmail account.
EDIt: There was yet another email to the recipient saying something has been shared, and that link had to be clicked for it to work.
? I think you misread. At no point the sender had to confirm for me. Only you open the link with shared contents on the receiving end after signup. Worked well in my testing.
The text in their email “xxx has accepted your invitation. For security reasons, please confirm their access to your shared item.”
I have not seen such emails. Interesting
Oh my end, I can’t access shared items without confirming the email first.
I suppose maybe you wouldn’t get emails for docs within a folder if someone shared top level access?