why American government has not gone after Proton like they did with Lavabit

Lavabit was based in the United States. Proton AG operates entirely in Switzerland. Ostensibly the US government would have to go through the Swiss court system to get anything out of Proton.

Others have already touched on the jurisdiction issue.

I'm also going to note, in the last 10 years a lot has changed. E2EE has gone from something that's fringe, to something integrated integrated into lots of products. Signal, Proton, and others launched in the wake of the Snowden revelations. Lavamail was Snowden's email provider.

It's kind of like being the "hipster nerd" playing D&D before D&D was popular vs playing D&D post popularity... It's pretty obvious to most people in 2023 that D&D isn't for demon worshiper, as it's pretty obvious in 2023 that E2EE isn't just for criminals. In other words, the value proposition of ProtonMail isn't as "sinister."

I personally suspect the US Govt (in terms of federal agencies) is adapting to the presence of encryption vs trying to kill or weaken it at every turn (similar to how Microsoft stopped trying to stomp out open source code). 9-11 was a very very very bad thing (and arguably why the US is one of the worst countries to host a privacy service). However, the "big one" when it comes to cyber attacks could be even worse (and I'm pretty sure there are people at NSA that understand how E2EE plays a role in securing the nation -- they're not dumb people after all).

Proton is also a larger company than Lavabit (I suspect), and with that comes lawyers, and money to feed them.

So long as ProtonMail isn't primarily acting to serve organized crime... I suspect "there are bigger fish to fry."

@lengsel @Dark_Arc

Lavabit was formed and located in the US, while Protonmail was not. As a result, the US had jurisdiction over Lavabit, while it does not have the same level of jurisdiction over Protonmail.

Oh! another lavabit victim in the wild. I signed up with em because i just wanted basic security and privacy for a new email account and then poof gone. To top it off, my next email provider had some issues and i lost that account too :(

Now I'm about ready to rant a post about how we down actually control our own email accounts and therefor don't control our lemmy accounts. I'm a big boy and can handle passwords and account control myself without a guarantor!

I am aware about bots and fake account stuff and see the need for better verification, but email is not a valid way to do it.

Nothing is perfect. Everything is this world is about trust even if they open source everything is practically impossible for you to verify all the code and then verified if it really been used on the final product . And that is only the VPN , what about the email provider, your ISP , your phone carrier? , the apps you daily use. Are you going to check the source code of every single thing you use? And make sure it is been using correctly? Also even if you can do all that , how do you know the encryption being used hasnt been broken by a government already? Come on man be more realistic.