this post was submitted on 10 Nov 2023
340 points (100.0% liked)

Technology

37382 readers
219 users here now

Rumors, happenings, and innovations in the technology sphere. If it's technological news or discussion of technology, it probably belongs here.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Slartibartfass@feddit.de 21 points 8 months ago (3 children)

PSA: mailbox.org has a great, privacy focused email service.

[–] aes@lemm.ee 2 points 8 months ago

I went on a trawl on email security and privacy.

It doesn't fucking exist.

Regular mails w/e sure

But I'm never talking to someone via email again.

[–] jcarax@beehaw.org 1 points 8 months ago* (last edited 8 months ago) (1 children)

Agreed, but unfortunately, unless they implement VJOURNAL in their caldav implementation, I'll probably switch to Fastmail when my prepay is up.

[–] Laser@feddit.de 4 points 8 months ago (1 children)

Fastmail is a great provider, very happy customers, but with them being in a five eyes country, I don't trust them. But it's only email which is a nightmare protocol regarding privacy anyways so I don't really care.

[–] cooopsspace@infosec.pub 1 points 8 months ago

Encryption + POP should be part of every privacy conscious person's repertoire.

[–] dan@upvote.au 1 points 8 months ago

Privacy-focused email doesn't truly exist, since it's likely 90%+ of people you email are probably using Gmail, Hotmail/Outlook, or Yahoo. Companies like Gmail/Google could still build a profile of you if they wanted to, by collecting all the threads you're a participant in.

The best you can do is self-host your mailbox (e.g. Using Mailcow) with an encrypted file system (e.g. using LUKS), but you'd still need to use an SMTP gateway to ensure deliverability, so it's going to be relayed through, and ultimately end up at, some third-party you have no control over. Some third-parties don't even have TLS enabled for their email servers.

You shouldn't think of email as a private or secure communication mechanism unless you're encrypting your emails.