this post was submitted on 19 Nov 2023
56 points (81.8% liked)
Technology
59446 readers
3601 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I really wanna support these folks but I'm also curious about the recent headlines with Cameron Ortis (Canada's own selfish version of Snowden who deserves a damn Peace Prize for reals) referencing these.
Also, I think people need to learn there is nothing "private" about email beyond not scanning which is like paying for a not-service (like don't fuck me over). Hell, its hard enough to work up the courage and stamina to vanishing-messages-set someone adversarial who desperately needs you to make and ebforce that decision upon them as a baseline for engaging with them at all.
I will pay $1/month for email company to not be an asshole but that's the extent of my patience with the notion and I have zero illusions about what is likely still happening on some level.
Edit: Snowden deserves reward, not Ortis.
Edit: whats the timeline/continuity in terms of Ortis' mention and
Tutanotarebranding toTutaProton is doing privacy the right way.
Can you share more about why you think Proton's approach is better than Tuta?
From a casual read through they both appear to use end to end encryption when users are on the same service. (Proton emailing Proton or Tuta emailing Tuta) and both offer the option to password encrypt an email so you can message someone on other services as long as you can share that password with them IRL somehow.
The biggest difference would be the theoretical claim that proton can't know anything about your emails because the mailbox itself is encrypted. The calendar too. This also means these accounts aren't compatible with any IMAP/POP3/Activesync clients, and you need to install your own proton plugin to use it with them. On the desktop. On the phones they have their own apps, since you can't use the phone email app nor the phone calendar. They are a bit lacking there too. Regarding the mailbox theoretical encryption claim, I'm sure it's really encrypting everything. It's just, email is inherently unencrypted (unless it's proton to proton) as it travels along the servers, unless you go to several pains to encrypt it, and your destinatary too, to decrypt it on their end. So for most purposes, right now the main difference between these two doesn't seem all that useful and it continues to be relatively simple to intercept/read your email along the way, since most likely it won't be encrypted anyway.
Proton supports openPGP natively in its apps which is neat so encrypted emails are easier but you can use openPGP with k9 and Thunderbird too.
Unfortunately openPGP is very rarely used by anyone.
My point exactly. What's the point of having an encrypted mailbox if everything that arrives to it is unencrypted and easily intercepted?