Looking for some #tech advice. Trying to move from #Gmail to more secure #email accounts. Set up free @protonprivacy account and was planning on doing one more. Planned on using #Mailfence but they won't let me register. I was thinking of going with @startmail or @fastmail as a general secure inbox. Any thoughts or experiences with them? A third option is to do Mail Plus with #Proton and have just one box. Wanted to keep costs lower ($5 or below). Doing this as part @cyberlyra's Cyber Cleanse!
What email provider would you recommend that works well with our good old #terminal based applications? I recently learned that the CEO of #proton has decided to praise some authoritarian leader in the USA and I'm considering switching to another mail provider. Also, even though I appreciated the fact that I could make #mu and mu4e work with their bridge app, there were some issues, like the fact it tangled with messages (see https://github.com/ProtonMail/proton-bridge/issues/119).
I'm considering going back to Posteo or maybe switch to Mailbox which seems to offer interesting features. Do anyone knows good alternative that are somewhat privacy focused? Having the option to use a personal domain name would also be great, so I can stop switching email adresses.
Looking to stop using #Gmail as my primary email service.
Has anyone used #Tuta (was #Tutanota)? It seems like they offer a good service. Any issues with it I should be aware of?
Obviously, changing email providers is no small task, so I want do as much as I can to make sure I'm picking the right service. Also plan on using a custom domain so I guess that'll make a switch in the future much easier.
Here's an interesting question for you: Can RFC 2047 encoded text in the Subject line of an email contain encoded line break characters (i.e.,, ^J, a.k.a. 0x0A)? I don't think they should, because the point of RFC 2047 encoding is to encode non-ASCII characters which would otherwise be legal in the Subject line, not to encode characters which would otherwise be _illegal_, which includes line breaks. RFC 2047 itself doesn't give a definitive answer. What do you think? #email#MIME#SMTP#SysAdmin
Much of what is commonly said about #email and #openpgp is wrong. It can very well be fast and secure and that's a claim backed by working code and deployments and audits (#chatmail servers and the #deltachat family of apps). There is no both-sides-have-opinions game to be played here. Internet-scale messaging alternatives are arguably either centralized or brittle. There is however much room for further improvements including deep changes in how we commonly understand email today. Stay tuned :)
@wiktor @octade I *really* appreciate your input here. The purpose of this thread is to venture into opportunities to improve traditional email in a way that doesn't suck (as @soatok also states in depth in his blog post that #email for socially working end-to-end confidentiality sucks). It is also not about other tools (like Signal, Bitmessage, Briar, ...).
This is about potential #cryptography for #authenticity or mon-repudiation use cases of email. PGP flavours, S/MIME or something else?
I was wondering ... as #email encryption via PGP/GnuPG is not suitable for true and ongoing end-to-end confidentiality. But what about authenticity of mails? I dislike S/MIME for its corporate nature, and #PGP via PGP/MIME is well enough supported by many (free) mail clients.
What's the #cryptography or #security community's view on PGP for signing emails? Or what would a suitable alternative be? I haven't come across any, though.
Bitmessage hides non-content metadata and uses a flood mixnet to unlink sender and receiver from eavesdropper view.
There is no alternative for email. Email clients support PGP and that's it. PGP does guarantee authenticity of a message due to digital signatures. PGP does not hide metadata about sender and receiver.
If you want truly confidential communication you have to set up a private pipeline. If you are using a public paid or free email service, you have zero confidentiality. Even if your message is encrypted, the email operators know who you are talking to.
I therefore consider this official opinion of Proton. Focussing on one aspect and completely ignoring the bigger picture of a luming fascist period in the most militarized economy of the world is just inacceptable. Proton just could have kept their mouth shut, but they decided not to. Thanks for revealing yourselves and happy to end my subscription, I won't support a company like you until you do better @protonprivacy
Please boost to spread this news if you find this important.
Hum, are we the only cross-platform messenger project present in 15+ app stores that primarily announces on, and interacts with, the Fediverse while others use X and maybe Bluesky? If you know of others please mention them in the replies :)
In any case, we are pretty happy here, as we are finding meaningful interactions, and organically evolving interest and collaboration with other people and projects. Probably it helps that #email shares several traits with #ActivityPub protocols? Cheers.
I want to move away from #Fastmail in the next couple weeks, but haven't figured out where to move to yet, and email is the only thing I don't feel like self-hosting yet...
@sun That's a design deficiency of #Nostr. If they'd looked at other networks--or even #e-mail and #irc--they would have known that spam resistance is at least as important as censorship resistance.
Back when there were lots of no-sign-up web-based clients, I saw loads of spam, including token airdrops and porn.
@sun That's a design deficiency of #Nostr. If they'd looked at other networks--or even #e-mail and #irc--they would have known that spam resistance is at least as important as censorship resistance.
Back when there were lots of no-sign-up web-based clients, I saw loads of spam, including token airdrops and porn.
If I were a tech or software dev hiring manager, I would automatically reject all applications coming from free email services like gmail, protonmail, tutanota, outlook, etc. A nerd or hacker should already have their own domain name and email server, or institutional email account.
Also, using a free email service for any personal business is a HUGE data security risk, not just for the applicant, but for the company responding to the applicant. State agencies can snarf such communications to glean inside business information, then sell that information to your competitors, which is probably happening somewhere right now as I write this.