Hi does anyone have some further information as to what exactly es E2E with Simplelogin/protonpass? My understanding is that everything but the alias addresses are because they need that for routing but I’m not clear about whether the name of the Alias is encrypted? I generally created aliases through Pass and not through Simplelogin if it matters.
My concern is that Proton has been giving up more data with court orders. I don’t know if there has been any case where proton gave up the mail account data based on a Simplelogin alias but I assume that will be the case. One thing I’m trying to be careful about but I’m not sure if proton would do, is if they would ever surrender a list of all aliases associated with an account. I have gotten out of the habit of making addresses that are like privacyguides.foo@simplelogin for this reason and instead put something like bar.foo@simplelogin so it’s decoupled from the site if Proton were to surrender a list of emails, unless an email was already leaked it would be unclear what sites these emails were associated with. However if the name of the Alias is not e2e this is a moot point.
That being said I understand the limitations of this and don’t use it for anything that is critical but it’s something I’m trying to keep in mind due to Proton’s somewhat misleading advertising.