Just a reminder, especially in this wild time we live in. DO NOT INSTALL WORK MDM ON YOUR PERSONAL DEVICE. If your work requires Microsoft Intune or similar MDM, to get email/teams/slack. don't accept it. It opens your device up for them to access private data and disable/delete your phone (even if they say they wont, they can)
Naturally, making this list is not easy. These are two types of companies I avoided in making my list.
1) Those who actually fall under US-jurisdiction because they are based or owned by a company in the USA.
More than often, I will stumble over a company that appears to be outside the USA, but later find they are owned by another corporation based inside the USA, and so they do fall under US-jurisdiction.
2) Those who voluntarily give up their sovereignty to the United States. The 2nd type, who voluntarily gives up their sovereignty in the way of US jurisdiction, have whole sections of their terms concerning US Laws and US based customers. If a fascist government says jump, these people will ask, how high?!
I encourage people to scrutinize my list. The old saying, "trust, but verify", is something I believe in.
Beginning in March, the excellent Mozilla Thunderbird email client will make its monthly ‘release channel’ builds the default download instead of the current ESR channel.
It's been a silly point of pride for me that I basically never receive the common penis-pills or Ray-Ban sunglasses #spam#email to my primary address; that I've successfully curated a persona that spammers are more likely to try to sell me a forklift or 50,000 LED strips or 3000 remote-control toy cars, or get me to help them with their AMAZING BUSINESS OPPORTUNITY.
IDK what I did in the last week to mess that that up. The only thing I want to triple in size is my workbench.
Looking for some #tech advice. Trying to move from #Gmail to more secure #email accounts. Set up free @protonprivacy account and was planning on doing one more. Planned on using #Mailfence but they won't let me register. I was thinking of going with @startmail or @fastmail as a general secure inbox. Any thoughts or experiences with them? A third option is to do Mail Plus with #Proton and have just one box. Wanted to keep costs lower ($5 or below). Doing this as part @cyberlyra's Cyber Cleanse!
What email provider would you recommend that works well with our good old #terminal based applications? I recently learned that the CEO of #proton has decided to praise some authoritarian leader in the USA and I'm considering switching to another mail provider. Also, even though I appreciated the fact that I could make #mu and mu4e work with their bridge app, there were some issues, like the fact it tangled with messages (see https://github.com/ProtonMail/proton-bridge/issues/119).
I'm considering going back to Posteo or maybe switch to Mailbox which seems to offer interesting features. Do anyone knows good alternative that are somewhat privacy focused? Having the option to use a personal domain name would also be great, so I can stop switching email adresses.
Looking to stop using #Gmail as my primary email service.
Has anyone used #Tuta (was #Tutanota)? It seems like they offer a good service. Any issues with it I should be aware of?
Obviously, changing email providers is no small task, so I want do as much as I can to make sure I'm picking the right service. Also plan on using a custom domain so I guess that'll make a switch in the future much easier.
Here's an interesting question for you: Can RFC 2047 encoded text in the Subject line of an email contain encoded line break characters (i.e.,, ^J, a.k.a. 0x0A)? I don't think they should, because the point of RFC 2047 encoding is to encode non-ASCII characters which would otherwise be legal in the Subject line, not to encode characters which would otherwise be _illegal_, which includes line breaks. RFC 2047 itself doesn't give a definitive answer. What do you think? #email#MIME#SMTP#SysAdmin
Much of what is commonly said about #email and #openpgp is wrong. It can very well be fast and secure and that's a claim backed by working code and deployments and audits (#chatmail servers and the #deltachat family of apps). There is no both-sides-have-opinions game to be played here. Internet-scale messaging alternatives are arguably either centralized or brittle. There is however much room for further improvements including deep changes in how we commonly understand email today. Stay tuned :)
@wiktor @octade I *really* appreciate your input here. The purpose of this thread is to venture into opportunities to improve traditional email in a way that doesn't suck (as @soatok also states in depth in his blog post that #email for socially working end-to-end confidentiality sucks). It is also not about other tools (like Signal, Bitmessage, Briar, ...).
This is about potential #cryptography for #authenticity or mon-repudiation use cases of email. PGP flavours, S/MIME or something else?
I was wondering ... as #email encryption via PGP/GnuPG is not suitable for true and ongoing end-to-end confidentiality. But what about authenticity of mails? I dislike S/MIME for its corporate nature, and #PGP via PGP/MIME is well enough supported by many (free) mail clients.
What's the #cryptography or #security community's view on PGP for signing emails? Or what would a suitable alternative be? I haven't come across any, though.
Bitmessage hides non-content metadata and uses a flood mixnet to unlink sender and receiver from eavesdropper view.
There is no alternative for email. Email clients support PGP and that's it. PGP does guarantee authenticity of a message due to digital signatures. PGP does not hide metadata about sender and receiver.
If you want truly confidential communication you have to set up a private pipeline. If you are using a public paid or free email service, you have zero confidentiality. Even if your message is encrypted, the email operators know who you are talking to.
I therefore consider this official opinion of Proton. Focussing on one aspect and completely ignoring the bigger picture of a luming fascist period in the most militarized economy of the world is just inacceptable. Proton just could have kept their mouth shut, but they decided not to. Thanks for revealing yourselves and happy to end my subscription, I won't support a company like you until you do better @protonprivacy
Please boost to spread this news if you find this important.