protonmail.ch Review

 N/A

HTTP/1.1 301 Moved Permanently
content-length: 0
location: https://protonmail.ch/

HTTP/1.1 301 Moved Permanently
content-length: 0
location: https://proton.me/mail
strict-transport-security: max-age=31536000; includeSubDomains; preload
public-key-pins-report-only: pin-sha256="8joiNBdqaYiQpKskgtkJsqRxF7zN0C0aqfi8DacknnI="; pin-sha256="drtmcR2kFkM8qJClsuWgUzxgBkePfRCkRpqUesyDmeE="; report-uri="https://reports.proton.me/reports/tls"
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none

HTTP/1.1 200 OK
date: Sun, 24 Aug 2025 00:51:11 GMT
set-cookie: Session-Id=aKph_7bYgj_-_P8uDuNiaQAAAEE; Domain=proton.me; Path=/; HttpOnly; SameSite=None; Secure; Max-Age=7776000
set-cookie: Tag=default; Path=/; SameSite=None; Secure; Max-Age=7776000
set-cookie: Features=GSMail2ButtonsPlusB2BNav:A; SameSite=lax; Secure; Max-Age=7776000000; Path=/
upgrade: h2
connection: Upgrade
last-modified: Fri, 22 Aug 2025 08:10:15 GMT
etag: "34d5b-63cefbc5807c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
content-length: 27476
content-type: text/html; charset=utf-8
x-ab-variant: A
pragma: no-cache
expires: 0
content-security-policy: default-src 'self'; media-src https://static.zdassets.com https://res.cloudinary.com https://pmecdn.protonweb.com; connect-src 'self' wss: https://protonmail.zendesk.com https://ekr.zdassets.com blob: https://account.proton.me https://reports.proton.me https://telemetry.proton.me https://*.algolia.net https://*.algolianet.com https://go.getproton.me https://noembed.com https://boards-api.greenhouse.io https://proton.me https://*.paypal.com https://*.paypalobjects.com; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline'  https://static.zdassets.com https://pmecdn.protonweb.com https://www.youtube.com https://platform.twitter.com https://*.paypal.com https://*.paypalobjects.com; style-src 'self' 'unsafe-inline' https://pmecdn.protonweb.com https://*.paypal.com https://*.paypalobjects.com; font-src 'self' https://pmecdn.protonweb.com; img-src 'self' data: blob: https:; frame-src 'self' data: blob: https://www.youtube-nocookie.com https://platform.twitter.com https://*.paypal.com https://*.paypalobjects.com; object-src 'self' data: blob:; child-src 'self' data: blob: https://*.paypal.com https://*.paypalobjects.com; report-uri https://reports.proton.me/reports/csp; frame-ancestors 'self' https://*.proton.me;
strict-transport-security: max-age=31536000; includeSubDomains; preload
public-key-pins-report-only: pin-sha256="CT56BhOTmj5ZIPgb/xD5mH8rY3BLo/MlhP7oPyJUEDo="; pin-sha256="35Dx28/uzN3LeltkCBQ8RHK0tlNSa2kCpCRGNp34Gxc="; report-uri="https://reports.proton.me/reports/tls"
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none