u/Dawnexa

Hi! As the title says, certain metadata regarding the individual calendars one can create in Proton Calendar is not E2EE. I was wondering whether this is a necessary sacrifice for some features or if it is planned to also E2EE the metadata of the calendar themselves.

Note: I am not talking about the events, those are E2EE I am talking about the calendars the events are saved in.

I think it would be very beneficial if the users were able to search their events for location. Since local search for title and description keywords are already implemented the keyword search for locations would be the next logical step if you ask me.

Is anything like this planned?

Does Tuta ever plan to do another external security audit? Since the last one happened over a decade and the results are not directly publicly visible I think it would strengthen the trust of the user base towards Tuta.

I found out that a certain competition calendar does not zero access encrypt metadata (such as the name and description of the Calendars themselves, timestamps etc) and I was wondering what exactly Tuta Calendar encrypts using E2EE and what it does not encrypt?

Thanks in advance!

Is there any hint that Proton might zero-access encrypt the subject lines at rest? Nowadays subject lines are more than enough data to construct a pretty solid timeline of a person. This would be a big privacy feature and since Proton Mail already supports E2EE search on Mail Content I see no reason why the Subject lines should not be encrypted at rest either with zero access.