this post was submitted on 24 Oct 2024
40 points (100.0% liked)
DeGoogle Yourself
8798 readers
1 users here now
A community for those that would like to get away from Google.
Here you may post anything related to DeGoogling, why we should do it or good software alternatives!
Rules
-
Be respectful even in disagreement
-
No advertising unless it is very relevent and justified. Do not do this excessively.
-
No low value posts / memes. We or you need to learn, or discuss something.
Related communities
!privacyguides@lemmy.one !privacy@lemmy.ml !privatelife@lemmy.ml !linuxphones@lemmy.ml !fossdroid@social.fossware.space !fdroid@lemmy.ml
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
as far as i am aware protonmail is pretty popular. I am hosting my own mail infrastructure but am considering to switch in the long run
I'm hearing about proton but they feel very scummy. Is proton(vpn and mail) actually privacy centered, doesn't log and doesn't sell data?
While I tought about self hosting an email, but doesn't that come with lots of problems, like you can't garantee five nines of uptime, or someone emails you cp, or websites not accepting custom domains? I also heard it's easly hackable.
Proton were forced by swiss court order to log the IP address of a climate activist, which led to his arrest, but as far as we know they never actually breached his encrypted emails.
Tuta had a similar incident, but due to being based in Germany, had to go farther, and allowed access to any emails that weren't encrypted for the court ordered individual.
That only matters if you believe you will be a person of interest for your government, and the lesson is that no email service is perfectly safe for things that require that level of protection.
For most of us, any of the private emails will be fine, and are certainly better than Google.
Yeah, they were able (and thus legally required) to hand over the user's recovery email address, which is what got them caught. You don't need to enter a recovery email address, and you can of course choose to use an equally-secure service for recovery.
One big technical issue to note is that Proton doesn't use end-to-end encryption for email headers, which includes recipients and subject lines, among other things. So that's potentially exposed to law enforcement as well. I believe Tuta does encrypt headers.
Yeah, I'm not "that guy". I'd just like to get my money's worth. Thanks for the highlights.