We sent ourself an email from a protonmail email address and we looked into the header. We sent it from the proton webmail. First of all, we were really impressed by the webmail which is faster than gmail, yahoo and hotmail. As you can see below we didn’t find the IP address of the client (my computer). The client IP is replaced by the server IP of protonmail. Protonmail is located in Switzerland. Consequently, it falls under the Swiss legal framework. This means that in order to get an IP address, someone needs to start legal proceedings and it has to go through Interpol if this person is located outside of Switzerland. If the law does not exist in Switzerland, the legal proceeding will stop.
Delivered-To: XXXXXXX@gmail.com
Received: by 2002:a02:3206:0:0:0:0:0 with SMTP id j6-v6csp2350435jaa;
Sun, 7 Oct 2018 02:21:06 -0700 (PDT)
X-Google-Smtp-Source: ACcGV617MPH/3LUVnqcUuX+1sps/UF7DjexChyAaLVQhMwq32zZu1jaK32c9SJtvCS1DBJahyKST
X-Received: by 2002:a1c:1783:: with SMTP id 125-v6mr12642648wmx.75.1538904066124;
Sun, 07 Oct 2018 02:21:06 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1538904066; cv=none;
d=google.com; s=arc-20160816;
b=pWXV07X0GBV7ltbXbiRr5ufdo25HCh9SaXEyWmTpeOmCyyvHHmQkzolLmTRwpIcHKc
DZx+Z1M0rYpgU9CpOgdRnNA1C8+zEX8IPtZxVun8nVNDds/jtjNygniEEyUkftlZKc8j
uBTbMF4ugTYSq37ew6xXjjyh9i1+Mz11FSiIemdilvU+5ochnupQvsj+pYMNEK4q55P1
jms23vjXQ87cAemeo/KpWmkds2gF+v3I2/C5gJsB87++aml0v6Na4Zz0cTKPAbrbWaPs
5agBquf/VGj8qqHAYtLy94zL4WsxBkJtLyWomecjcopF/LGQbq7auThr/MO181UgBUeL
Qg9Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:feedback-id:message-id:subject:reply-to:from:to
:dkim-signature:date;
bh=fBKuLbTnM1zhZj2qWM8EQZWdROOgO0z/XhQip7dfqmg=;
b=XDJMqkpf0u4n8qRZWOnU7oFq0esjUZ8E7YrvKO4QDzFuNptuV6u6KEm2GZ38O3rfDG
dHti/yFeA7pe3D1I4JWJUa8UIes21xBghn/2c+DgCucxPMKiB79XgNz7O3XAPAQgrr5e
kcw9Eg92ZKHnC5sU983K/O8yBuE6l3ltwCqMhJSckDjNv18Fi70jHoHyvAZgjV8BoT+z
LMaaJrC3AFBXO2febRce1HjEexNHnmXEwPnN01/OMIbpu2ZFf9g2EMyR1sAajQmyx0JS
MknYFjz5+IVWqlJ/5TG+7a86eEm7+drOXB3jqCv036nDWSTuF0rWf+3GgJ3vtCTiS9nd
Nh9w==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@protonmail.com header.s=default header.b=nrUagrUz;
spf=pass (google.com: domain of XXXXX@protonmail.com designates 185.70.40.130 as permitted sender) smtp.mailfrom=XXX@protonmail.com;
dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=protonmail.com
Return-Path: <XXXXXX@protonmail.com>
Received: from mail-40130.protonmail.ch (mail-40130.protonmail.ch. [185.70.40.130])
by mx.google.com with ESMTPS id z129-v6si5651217wmg.157.2018.10.07.02.21.05
for <XXXXX@gmail.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 07 Oct 2018 02:21:06 -0700 (PDT)
Received-SPF: pass (google.com: domain of XXXXXX@protonmail.com designates 185.70.40.130 as permitted sender) client-ip=185.70.40.130;
Authentication-Results: mx.google.com;
dkim=pass header.i=@protonmail.com header.s=default header.b=nrUagrUz;
spf=pass (google.com: domain of leXXXXX@protonmail.com designates 185.70.40.130 as permitted sender) smtp.mailfrom=leXXXX@protonmail.com;
dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=protonmail.com
Date: Sun, 07 Oct 2018 09:20:59 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com;
s=default; t=1538904065;
bh=fBKuLbTnM1zhZj2qWM8EQZWdROOgO0z/XhQip7dfqmg=;
h=Date:To:From:Reply-To:Subject:Feedback-ID:From;
b=nrUagrUzKA7EEitvskXK7rmxwTESriJuo9MHRPEAsnj2E6ydqfT9PZPO/o2N/5Hue
WXkKyKsR9ODAvxe/i5yy6N3KE6JoLLppIEpcV5pfLiysUajo6ofLSmwrG5jk45+dX5
P+n05j+vYsJX0tD43k8mXeZ3bdsN+I7wOt4akybc=
To: "xxxxx@gmail.com" <xxxt@gmail.com>
From: Monsieur Dupont <xxxx@protonmail.com>
Reply-To: Monsieur Dupont <xxxxx@protonmail.com>
Subject: (No Subject)
Message-ID: <uBNNEZIchJXLlAUStTpjOjaapM-RWj2YPelgOgzzm_0RY2MnrDo-ZS5ydwNq9aUYOBSx5QK57Cct2ncjZWj9kQFwJXysx_gnRnpuBD2OM40=@protonmail.com>
Feedback-ID: sR4A8rbOzvT3phM8k4iDMGGKXfXE-HmBr9eV-Fp78MEGycTTrliV4tmPOVilYGirO-KDv1WLNwRVcLa7F8jCOw==:Ext:ProtonMail
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_66819c14dfc29270d021bacb764e120d"
X-Spam-Status: No, score=-1.1 required=7.0 tests=ALL_TRUSTED,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,HTML_MESSAGE autolearn=ham
autolearn_force=no version=3.4.0
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mail.protonmail.ch
This is a multi-part message in MIME format.
--b1_66819c14dfc29270d021bacb764e120d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64
dGVzdAoKU2VudCB3aXRoIFtQcm90b25NYWlsXShodHRwczovL3Byb3Rvbm1haWwuY29tKSBTZWN1
cmUgRW1haWwu
--b1_66819c14dfc29270d021bacb764e120d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
PGRpdj50ZXN0PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdiBjbGFzcz0icHJvdG9ubWFpbF9zaWdu
YXR1cmVfYmxvY2siPjxkaXYgY2xhc3M9InByb3Rvbm1haWxfc2lnbmF0dXJlX2Jsb2NrLXVzZXIg
cHJvdG9ubWFpbF9zaWduYXR1cmVfYmxvY2stZW1wdHkiPjxicj48L2Rpdj48ZGl2IGNsYXNzPSJw
cm90b25tYWlsX3NpZ25hdHVyZV9ibG9jay1wcm90b24iPlNlbnQgd2l0aCA8YSBocmVmPSJodHRw
czovL3Byb3Rvbm1haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+UHJvdG9uTWFpbDwvYT4gU2VjdXJl
IEVtYWlsLjxicj48L2Rpdj48L2Rpdj4=
--b1_66819c14dfc29270d021bacb764e120d--