protonmail.com Review

 N/A

HTTP/1.1 301 Moved Permanently
content-length: 0
location: https://protonmail.com/

HTTP/1.1 301 Moved Permanently
date: Thu, 03 Jul 2025 04:05:46 GMT
set-cookie: Session-Id=aGYBmqPYCKm_j-V81X1hfwAAAAI; Domain=protonmail.com; Path=/; HttpOnly; SameSite=None; Secure; Max-Age=7776000
set-cookie: Tag=redirect; Path=/; SameSite=None; Secure; Max-Age=7776000
cache-control: no-store
location: https://proton.me/mail
content-length: 230
content-type: text/html; charset=iso-8859-1
strict-transport-security: max-age=31536000; includeSubDomains; preload
public-key-pins-report-only: pin-sha256="8joiNBdqaYiQpKskgtkJsqRxF7zN0C0aqfi8DacknnI="; pin-sha256="drtmcR2kFkM8qJClsuWgUzxgBkePfRCkRpqUesyDmeE="; report-uri="https://reports.proton.me/reports/tls"
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
onion-location: https://protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion/

HTTP/1.1 200 OK
date: Thu, 03 Jul 2025 04:05:17 GMT
set-cookie: Domain=proton.me; Path=/; HttpOnly; SameSite=None; Secure; Max-Age=7776000
set-cookie: Tag=default; Path=/; SameSite=None; Secure; Max-Age=7776000
last-modified: Wed, 02 Jul 2025 11:27:41 GMT
etag: "314de-638f08c838540-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=120, s-maxage=120, must-revalidate
content-length: 26343
content-type: text/html; charset=utf-8
age: 30
content-security-policy: default-src 'self'; media-src https://static.zdassets.com https://res.cloudinary.com https://pmecdn.protonweb.com; connect-src 'self' wss: https://protonmail.zendesk.com https://ekr.zdassets.com blob: https://account.proton.me https://reports.proton.me https://telemetry.proton.me https://*.algolia.net https://*.algolianet.com https://go.getproton.me https://noembed.com https://boards-api.greenhouse.io https://proton.me https://*.paypal.com https://*.paypalobjects.com; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline'  https://static.zdassets.com https://pmecdn.protonweb.com https://www.youtube.com https://platform.twitter.com https://*.paypal.com https://*.paypalobjects.com; style-src 'self' 'unsafe-inline' https://pmecdn.protonweb.com https://*.paypal.com https://*.paypalobjects.com; font-src 'self' https://pmecdn.protonweb.com; img-src 'self' data: blob: https:; frame-src 'self' data: blob: https://www.youtube-nocookie.com https://platform.twitter.com https://*.paypal.com https://*.paypalobjects.com; object-src 'self' data: blob:; child-src 'self' data: blob: https://*.paypal.com https://*.paypalobjects.com; report-uri https://reports.proton.me/reports/csp; frame-ancestors 'self' https://*.proton.me;
strict-transport-security: max-age=31536000; includeSubDomains; preload
public-key-pins-report-only: pin-sha256="CT56BhOTmj5ZIPgb/xD5mH8rY3BLo/MlhP7oPyJUEDo="; pin-sha256="35Dx28/uzN3LeltkCBQ8RHK0tlNSa2kCpCRGNp34Gxc="; report-uri="https://reports.proton.me/reports/tls"
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none