this post was submitted on 27 May 2025
449 points (97.9% liked)

Privacy

2370 readers
881 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don't promote big-tech software
  3. No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 6 months ago
MODERATORS
 

Most of you said you’d switch to Proton Mail for the privacy, even if it meant giving up some of the convenience of Gmail.

top 50 comments
sorted by: hot top controversial new old
[–] _cryptagion@lemmy.dbzer0.com 5 points 5 days ago

What features does Gmail even have to sacrifice? It’s just basic email.

[–] Rin@lemm.ee 8 points 5 days ago

Gmail has features? Fucking where?

[–] Owlboi@lemm.ee 15 points 6 days ago (2 children)

honestly i believe the reason so many people are never gonna switch from google is because so many services allow you to use your google as an easy one click register/login. its so convenient that i have friends who'd rather have all their privacy be infringed than to give that up.

not to mention the dozens of services google provides themselves, from maps to mail to search to whatever the fuck

similar to apple, its an ecosystem. one of convenience.

[–] TriflingToad@sh.itjust.works 3 points 5 days ago (1 children)

100%. it's SO annoying to remember passwords especially when my phone doesn't auto save them 50% of the time because it doesn't feel like it.

[–] amelore@slrpnk.net 2 points 4 days ago (1 children)

Why doesn't everyone just use a better manager like Lastpass or Bitwarden, it's super easy to use.

[–] TriflingToad@sh.itjust.works 1 points 4 days ago (1 children)

I do use Bitwarden, and in my experience of >1 year, it's good enough. It sometimes doesn't save automatically and if you save (for example) a McDonalds login on PC, it won't offer to fill on their app. Also you cant save new passwords offline which is a pretty rare situation but it made me want to rip my hair out (granted I didn't have enough food that day so I was angry to begin with).
Minor gripes for sure, but Google doesn't have the same annoyances. Not worth going back to Google though.

[–] amelore@slrpnk.net 1 points 4 days ago* (last edited 4 days ago)

I guess I've always just made the new passwords in Bitwarden and have it fill in the form rather than fill in the form and let Bitwarden save it. Do you not use generated passwords? Can't help you on the offline thing, I see how that would be annoying.

[–] A_norny_mousse@feddit.org 5 points 6 days ago

It's called the Googleverse.

Many people don't know the difference between the Google search bar and the URL bar anymore.

[–] chunes@lemmy.world 15 points 6 days ago (2 children)

Email doesn't need "features." It's been a solved problem for decades.

[–] msage@programming.dev 3 points 5 days ago (1 children)

It does need a PGP integration.

I mean I know why it won't, and never in Gmail, but we do need it.

[–] viking@infosec.pub 2 points 5 days ago

You'd be surprised how seamlessly https://flowcrypt.com/ integrates with gmail. Been using it for years, zero complaints.

[–] A_norny_mousse@feddit.org 2 points 6 days ago

I agree.

I guess most of these people don't understand the difference between the protocol/server and the client software, and most of those use the web ui anyhow.

[–] viking@infosec.pub 3 points 5 days ago (1 children)

Moving away from gmail is one thing, but Proton's CEO is a massive cunt that I wouldn't personally trust anymore. I have an ongoing subscription for some of their services (including email, but I don't really use it), and I'm going to move on from there after the subscription expires.

[–] ysjet@lemmy.world 4 points 5 days ago* (last edited 5 days ago)

not to mention Proton's PR team has mod positions in the subreddit and lemmy community and like to do some pretty aggressive censoring of anything that refers to the CEO's support of Trump in hopes of gaslighting everyone to forget about it.

I got banned from the lemmy community recently and my posts removed as 'misinformation' for talking about it... like man the entire internet saw him say this shit.

[–] leadore@lemmy.world 8 points 6 days ago (1 children)

It's not like Proton mail is the only alternative. And like the article points out, you don't get encryption anyway, since almost no one else you'd be communicating with is going to be on Proton. I use (and recommend) posteo.de but there are other good alternatives for email. But if you want encrypted communication you'll need to use an app designed for that, not email.

[–] A_norny_mousse@feddit.org 7 points 6 days ago (7 children)

I never quite understand why people use Proton. It just automates the exchange of PGP/GPG keys, but only if the other person also uses Proton, right?

Anyhow, +1 to paying a small amount of money for email. I was with posteo.de myself for many years. I heard mailbox.org is even better/safer and has slightly more features. Both start at 1€/month.

BTW, I set up an eternal redirect email address a long time ago, so I can change the actual provider without having to tell all my contacts.

[–] LodeMike 3 points 6 days ago (1 children)

It also encrypts your emails automatically (both incoming and outgoing) and lets you set PGP keys for any address you want, and fetch/manually trust Proton Mail users' keys.

[–] A_norny_mousse@feddit.org 2 points 6 days ago* (last edited 6 days ago) (1 children)

encrypts your emails automatically (outgoing)

How does that work for recipients I haven't shared secrets with?

BTW any decent email client has an option or plugin to do that.

load more comments (1 replies)
[–] sudneo@lemm.ee 3 points 6 days ago (1 children)

To be precise, even when an email is not from Proton user, they encrypt it with ypur public key, send it to you and delete it (they call it zero access). Which is the best you can get. Also managing PGP keys, especially on multiple devices is a pain.

[–] A_norny_mousse@feddit.org 1 points 6 days ago (1 children)

This is actually good to know. OTOH, aren't all messages transfered using encryption with most email providers/clients anyhow (TLS/SSL)? This is mostly about making sure your data on the servers stays safe even if someone gains access, right?

[–] sudneo@lemm.ee 2 points 6 days ago (1 children)

So, TLS is just a point-to-point encryption protocol, it doesn't prevent anybody of the parties involved from having access to the content. Once the email is encrypted with PGP, Proton loses permanently access to this content.

So this is pretty much what happens with a Gmail <-> Outlook and a Gmail <-> Proton email.

Gmail to outlook:

A writes the email in their editor <- TLS -> Google servers <-TLS-> outlook servers <-TLS-> B reads the email. While every communication is encrypted with TLS, every server has access to its content. Every time B accesses the email from outlook servers (I.e., their inbox), the data is transferred with TLS, but outlook is the "other end of the tunnel", so it has access to this content.

Gmail to Proton:

A writes the email in their editor <- TLS -> Google servers <-TLS-> Proton servers -> encrypt original message with B's public key and discard original -> send to B inbox -> Proton client decrypts email -> B accesses it.

So yes, it is

about making sure your data on the servers stays safe even if someone gains access

As long as you consider the email provider part of those potential "someone".

The way I would say it essentially is that PGP encryption (even in cases where the original messages was not using it) still gives you the confidentiality property of PGP, even without the integrity and non-repudiation properties (which are not possible to guarantee with respect of the original message of course). In other words, the biggest difference is that the email provider doesn't have access to your stuff.

[–] sugar_in_your_tea@sh.itjust.works 2 points 6 days ago (1 children)

Yeah same, so I went with Tuta which is a bit cheaper and encrypts more.

[–] sudneo@lemm.ee 2 points 6 days ago

Yes, tuta encrypts the subject, which is not encrypted in Proton for example.

[–] P1nkman@lemmy.world 2 points 6 days ago (1 children)

I just created an account with mailbox.org - now I just need to spend the next months transferring all relevant emails.

[–] A_norny_mousse@feddit.org 1 points 6 days ago (1 children)

spend the next months transferring all relevant emails.

Why don't you just keep them on your machine? No need to clutter online storage with old mails.

Oh wait, you probably don't use email client software.

[–] P1nkman@lemmy.world 1 points 6 days ago (1 children)

I think you've misunderstood, and my writing was bad. I meant transferring all my accounts to the new email domain, not move all emails (I have already downloaded them) 🙂

[–] A_norny_mousse@feddit.org 1 points 6 days ago (1 children)

You must have a lot of email accounts.

[–] P1nkman@lemmy.world 1 points 5 days ago

My password manager has more than 600 accounts stored... Though, I'll only transfer the ones I still use lol

load more comments (3 replies)
[–] Broken@lemmy.ml 2 points 5 days ago

Yeah, this isn't really scientific or anything. The details of he survey aren't really discussed in detail, and its not random sampling... Its readers of android authority.

That's nearly equivalent of saying, the majority of people in this privacy group care more about privacy than google features.

I'd be interested to see a broad survey like this though to get a real sense of how the general publics views on privacy are changing.

[–] Resplendent606@lemmy.world 3 points 6 days ago

I highly recommend Disroot.org. I switched as part of my deGoogling and I am very happy.

load more comments
view more: next ›