Last week, we underwent the process of fortifying our SSL certificates. As part of our effort to provide the highest level of security and privacy to our users, we have upgraded every single certificate that we use.
The new SSL certificates have several marked improvements over the previous ones.
- All certificates now use the highest strength 4096-bit RSA
- protonmail.ch now uses an Extended Validation certificate
- All certificates are now hashed using the stronger SHA256 algorithm
These changes can already be seen when you visit ProtonMail by the presence of a green bar in the URL.
Our new certificates are issued by SwissSign which is a wholly owned by Swiss Post, a public institution owned by the Swiss Confederation and not under US or EU control.
In addition to the new certificates, we have also implemented much stronger SSL encryption. The SSL encryption algorithms we support now provide Perfect Forward Secrecy and our servers are now configured to always use the strongest possible encryption for client connections. As a result, ProtonMail is graded A+ on our SSL report.
We are committed to your security and privacy online and in the future you can look forward to further improvements.
The ProtonMail Team