this post was submitted on 05 May 2024

89 points (93.2% liked)

Privacy

31175 readers

1061 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago

MODERATORS

The Best Secure Email Providers in 2024 (blog.thenewoil.org)

submitted 4 months ago by BrikoX@lemmy.zip to c/privacy@lemmy.ml

50 comments fedilink hide all child comments

Like it or not, email is a critical part of our digital lives. It’s how we sign up for accounts, get notifications, and communicate with a wide range of entities online. Critics of email rightfully point out that email suffers from a significant number of flaws that make it less than ideal, but that doesn’t change the current reality. In light of that reality, I believe that an encrypted email provider is a must-have for everyone in today’s age of rampant data breaches, insider threats, warrantless police access, and targeted advertising. If I can get access to your emails, I can get a range of sensitive information including where you bank (to craft more convincing phishing attacks), information about pets (I get notifications each year from the vet for my cats’ annual checkups), calendar reminders, news announcements from family, support tickets from services you use, and more. In a worse case scenario, if I get access to the account itself, it’s trivial to simply issue password reset requests for nearly any of those accounts, have it to sent to said compromised email account, and gain access to a wide number of other accounts you use – from banking to shopping and more – for any number of reasons. So this week, let’s look into the top encrypted email providers The New Oil recommends and their features to help decide which one is right for you.

you are viewing a single comment's thread
view the rest of the comments

[–] just_another_person@lemmy.world 106 points 4 months ago (4 children)

TLDR: Proton and Tuta

[+] MagneticFusion@lemm.ee 13 points 4 months ago (1 children)

[deleted]

[–] ISOmorph@feddit.de 7 points 4 months ago (1 children)

Let's see what europes e2ee ban will bring. Proton is one of the "high risk" services mentioned in the bills debate. Might not be too long before you have to host your own mail server if you want privacy in europe.

[–] electro1@infosec.pub -2 points 4 months ago (3 children)

I'm probably going to downvoted to hell with this... But didn't people say Proton might be a government Op, even Tuta was mentioned as a honeypot in a recent Court case, so they released a blog post titled: Tuta is not a honeypot....

Idk... my guts tell me, if something is too good to be true, then it's not true... Proton offerings are amazing for a free plan... And their clients looks good and they sponsor YT channels... I used to be happy to see an Open source project succeed as a business, but the concept of honeypots, made me rethink my view

[–] wagoner@infosec.pub 6 points 4 months ago (1 children)

Idk... my gut tells me... didn't people say... might be... I'm probably going to be down voted to hell... if something's too good to be true...

What a ridiculous response.

[–] electro1@infosec.pub 1 points 4 months ago (1 children)

What a ridiculous response.

what's so ridiculous about it?

[–] wagoner@infosec.pub 2 points 4 months ago (1 children)

I quoted the bits that answer your question and which completely undermine the bits I didn't quote.

[–] electro1@infosec.pub 0 points 4 months ago (1 children)

first of it's a comment not a response.. secondly, you quoted everything in wrong order to make it appealing to further ridicule, which brings me to my last but not least point, is that what you do? you find something ridiculous and get your dopamine kick by saying how ridiculous it is!

I quoted the bits that answer your question and which completely undermine the bits I didn't quote

Not what I asked, I don't see ridiculousness in my comment, so if you care to reply with feedback, please do, otherwise stop bothering me

[–] wagoner@infosec.pub 1 points 4 months ago (1 children)

This is all kinda of weirdness. You were the one who asked me a question, and I responded to it. And now I'm done. Have a nice day.

[–] electro1@infosec.pub 1 points 4 months ago

This is all kinda of weirdness

lmao, wow...

[–] BrikoX@lemmy.zip 3 points 4 months ago (1 children)

You thinking it's a honeypot is a win for the government. All they need to do is spread some propaganda instead of actually bothering to run a service that is hard to keep alive. And if they were to run a honeypot, having it outside 14 eyes countries would be the most stupid decision the government could make.

[–] electro1@infosec.pub 0 points 4 months ago (1 children)

You thinking it's a honeypot is a win for the government. All they need to do is spread some propaganda

Good point, but I didn't think of it that way just because, I saw things and read stuff that made me suspect it...

to run a service that is hard to keep alive. And if they were to run a honeypot

But they did, and it worked for them before, and it'll always work unless no one start using that service, so there's no point in keeping servers operational.. time for a rebrand. plus they're getting paid.

having it outside 14 eyes countries would be the most stupid decision the government could make.

having it outside the US ( if we're talking about the US ) maybe, but the 14 eyes... It's just s story at this point, even countries outside the 14 eyes spy on their citizens and make secret deals.. So..

[–] BrikoX@lemmy.zip 1 points 4 months ago

Good point, but I didn't think of it that way just because, I saw things and read stuff that made me suspect it...

There is "speculation" spread about every single "privacy" focused service for exactly that reason. If you don't trust them, you are not using them. I'm not saying don't be suspicious, but also look at facts that make it unlikely of it being a honeypot.

But they did, and it worked for them before, and it'll always work unless no one start using that service, so there's no point in keeping servers operational.. time for a rebrand. plus they're getting paid.

Right, but there are plenty of easier services to target that provide more sensitive information. If you are a honeypot, you have to be profitable and expand your services or people will move somewhere else. That all takes time and work. Buying other services like SimpleLogin or Standard Notes and integrating their staff into your scheme would be unnecessary complication.

having it outside 14 eyes countries would be the most stupid decision the government could make.

It's not a story. So called 5 eyes, 9 eyes and 14 eyes refers to country agreements to share intelligence and make cooperation instant instead of having to go through proper channels that take time. I'm sure there are many conspiracy theories about specific things that might not be true, but there is no dispute that these agreements exist.

Government run honeypots are usually facilitated by federal agencies, INTERPOL, or EUROPOL, and if they want to run something in a country where they are not welcome it has to be court approved. Hence, it being run in 14 eyes countries, make it easy. Switzerland on the other hand not only requires everything to be approved by their courts, but also require using their specific privacy laws when making determination, which are the strongest in the world.

You only need to look at previous known honeypots to see where they originate and what they target.

[–] Smoke@frogdrool.net -4 points 4 months ago (1 children)

@electro1 @ISOmorph imagine your enemy has infinite money, manpower, and resources to turn against you.

why would the DoD give away a weapon like TOR?

why would satoshi release bitcoin at 51% difficulty?

why would Putin allow for the grotesque corruption of the oligarch state?

because they have the other half.

[–] electro1@infosec.pub 3 points 4 months ago

because they have the other half.

could you please elaborate, or matter of fact, ELI5...

Isn't the whole purpose of having power and control, is to have it all, or make it appear that you're not in control?

[–] clmbmb@lemmy.dbzer0.com 11 points 4 months ago* (last edited 4 months ago) (3 children)

Yes, and both have proprietary clients. I have proton and I'm in the process to moving away mainly because I can't use their calendar and contacts natively in Android. Not sure about Tuta, but I never liked them.

[–] refalo@programming.dev 4 points 4 months ago (1 children)

Well do you want privacy or do you want convenience? You can't really have both here IMO

[–] clmbmb@lemmy.dbzer0.com 2 points 4 months ago

You don't have 100% privacy as long as you send mails to people and services that don't support proton's encryption. If I wasn't privacy I can always use gpg.

[–] just_another_person@lemmy.world 2 points 4 months ago (1 children)

Didn't Proton release some kind of adapter to solve this issue and allow for IMAP?

[–] LittleBobbyTables@lemmy.sdf.org 10 points 4 months ago* (last edited 4 months ago) (1 children)

Yes, Proton Mail Bridge. I use it with KMail, works pretty well, I’d say.

Edit: I think this client is only for desktop, however. Android users will have to find another option.

[–] just_another_person@lemmy.world 1 points 4 months ago

That sucks, but good to know.

[–] Twitches@lemm.ee 1 points 4 months ago (4 children)

Same calendar doesn't give notification unless I open it. I'm just looking to replace Google.

[–] archer@lemmy.ml 8 points 4 months ago

It works for me in GrapheneOS, should work on regular Android, too? What I'm missing is a dedicated Proton contacts application including integration into the phone app.

[–] vatlark@lemmy.world 3 points 4 months ago

Huh, works fine for me for nearly a year now. The only thing I still use google calendar for are some shared calendars.

After proton adds Standard Notes. I'm hoping google maps will be the last product I'm tied to.

[–] clmbmb@lemmy.dbzer0.com 3 points 4 months ago (1 children)

I get notifications some times, but mostly I get them at totally random times. It's very annoying.

[–] Twitches@lemm.ee 2 points 4 months ago (1 children)

Check your battery optimization, so if you go to the app in your settings turn off all battery optimization. Just did this, not sure how well it's going to work, but, maybe

[–] clmbmb@lemmy.dbzer0.com 2 points 4 months ago (1 children)

I've done this. Didn't help. I'm in a Samsung S20+ and checked with my wife's pixel too and still have problems.

[–] Twitches@lemm.ee 1 points 4 months ago

I have the same phone. I'm guessing mine probably won't work either :(

[–] RiQuY@lemm.ee 7 points 4 months ago (1 children)

Mailbox.org too.

[–] TCB13@lemmy.world 4 points 4 months ago (1 children)

The guys who decided to block GrapheneOS for no reason and don't provide reasonable explanations nor fix the issue.. yeah right.

[–] Pantherina@feddit.de 2 points 4 months ago (1 children)

What, source?

How would you block an OS?

And btw there are some reasons why GrapheneOS may be criticised

[–] TCB13@lemmy.world 2 points 4 months ago (1 children)

https://grapheneos.social/@GrapheneOS/112378169615030832

[–] Pantherina@feddit.de 1 points 4 months ago* (last edited 4 months ago)

Thanks! TLDR spamhaus (a big spamlist provider) has them on their spamlist, or maybe not, and they are using some fancy CDN.

It is VERY likely just a technical error.

[–] delirious_owl@discuss.online 2 points 4 months ago* (last edited 4 months ago)

Wish I could signup on Tor.

I use dnmx instead