While Proton does have an obligation to stop spread of SPAM mail, this incident is a bit different. Let’s see -
Proton was not approached by other Email providers (Gmail/Outlook) about suspected email SPAM campaign originating from their network.
This matter is NOT even related to SPAM mails.
krCERT - a Govt agency approached Proton and asked them to disable the account.
Proton simply complied to that without verification.
Appeal made by Owner of that email id was rejected.
Subsequently follow ups were also ghosted.
Until the tweet from the journalist went viral, Proton was not in mood to reinstate the account.
Note that while Proton Mail (server) is E2E encrypted, but once email exits their network it no longer remains as such. So, whoever (other email provider or incident reporter) reported the incident, should have a copy of unencrypted email to prove abuse of Proton Mail service.
Given that proton now reinstated the account, that proves Proton initially froze that account based on “Trust me, Bro” proof only from krCERT.
In ideal world, any service provider should require a court order to comply with Govt request to remain unbiased in such situation.
While Proton does have an obligation to stop spread of SPAM mail, this incident is a bit different. Let’s see -
Note that while Proton Mail (server) is E2E encrypted, but once email exits their network it no longer remains as such. So, whoever (other email provider or incident reporter) reported the incident, should have a copy of unencrypted email to prove abuse of Proton Mail service.
Given that proton now reinstated the account, that proves Proton initially froze that account based on “Trust me, Bro” proof only from krCERT.
In ideal world, any service provider should require a court order to comply with Govt request to remain unbiased in such situation.