Thanks 😊

It’s true that 27001 is more valued in the industry. The lack of the certificate also doesn’t imply they have no information security management system.

I was surprised they weren’t certified yet.

I passed my first audit last week. I know exactly what it entails.

I would have expected Proton to have had this certificate a while ago.

kudos on them passing the audit though.

They didn’t have 27001?

edit: typo

It’s ok to provide your employer with your personal infornation. kudos to them for asking.

When you get invited into a Teams call you don’t need a microsoft account to join as guest. you’ll get the web interface probably.

that would immediately prompt me to use vpn for any connection. I’m sorry to hear that man.

messing with html sounds very worrying to me. is that on https connections to any site they do not control? Do you have an isp application installed?

I’m using DAVx which is available on F-droid. syncs contacts and calendar with nextcloud.

That is literally fucked. There are some scenario’s where I can imagine an ISP wanting to force wireless on. a mesh network for their customers sounds like the most straightforward reason. if you cannot replace the router, faraday the shit out of it. put your own router behind the isp router and don’t forget to change the MAC address of the router (isp will probably block any 3rd party router macs on the network. seen it before)