Live data from Hacker News

Fastmail offers EU data region

fastmail.com

291–300 of 303 posts

Re: Fastmail offers EU data region

#291

Earlier quoted context omitted.

Just like EVERY OTHER democracy. Not really. In most representative democracies it is the elected representatives who initiate new law. In the EU the elected MEPs have no power to do this and it is the role of the unelected Commission to start the process. Meanwhile the Commission is also the "executive branch" of the EU. A great deal of what the commissioners do is not directly subject to approval by the European Pa…

The EU, like most union governments including the USA, was designed to be conservative and not pass things by default. For something to pass the EU, it has to be wanted by both the leaders of all the EU countries (the commission) and the people in all the countries (the parliament). It's similar to the house and senate of the USA

You are misunderstanding the leadership structure of the EU. There are three main bodies that lead it - the Council of the European Union, the European Commission, and the European Parliament.

The Council is the one that generally consists of the leaders of each member state. It has important roles in the system including selecting candidates for key roles and as part of "trilogue" negotiations (which are themselves sometimes controversial for being secretive and unaccountable) but has little formal participation in the normal legislative process.

The Parliament is the one whose members are elected by the citizens of the EU. Its best known role is to debate and vote on new legislation.

The Commission holds much of the real power as it serves as both the leadership of the executive branch and the origin of new legislative proposals - and yet its members are chosen via much less transparent means and have little personal accountability to EU citizens.

Many EU commissioners have been politicians whose national political careers were struggling and - like appointment to the House of Lords here in the UK - they may have been put forward for the Commission by their national political leadership as a position of influence that required less confirmation than winning a popular vote. This is relevant here because von der Leyen herself is arguably in this category.

Re: Fastmail offers EU data region

#292

Earlier quoted context omitted.

Yes but it will almost always work with self signed or expired certificates, or downgrades to clear text if that's what it takes to deliver the message.

I thought a few years ago Gmail started demanding TLS so now any mail server that anyone cares about supports TLS.

I had a mail server running with a LetsEncrypt cert. I never set up the cron job to renew it, and months later realized that the certificate had expired. Gmail never glitched sending mail to my server. This was some time in 2025, so not too long ago.

Re: Fastmail offers EU data region

#293

Earlier quoted context omitted.

IMAP can do TLS though (IMAPS). Did they say what's stopping them from using that (and requiring the encryption!)?

They didn't need to. When you start denying IAMP to your customer in the name of "encryption" at that point it becomes privacy theatre, instead of privacy, irrespective of how nobly activist their intensions are. It is probably slightly worse than a mail provider assuming they can't trust their users with encrypting their emails when needed.

> When you start denying IAMP to your customer in the name of "encryption" at that point it becomes privacy theatre, instead of privacy, irrespective of how nobly activist their intensions are.

How would the lack of IMAP compromise encryption? Sounds dubious.

Lock-in effects are problematic, but separate from encryption or privacy in general.

If the concern is actually lock-in, it is worth noting: there is little lock-in in the current Tuta offering. The service allows users to export emails into standard EML files. If you decide to switch providers, simply point your domain to the new provider and import your latest backup.

Re: Fastmail offers EU data region

#294
post #213

Earlier quoted context omitted.

I dont share your optimism: The US can just say: let us access this one customer or we will ruin your vpcs in the US. What can you do about it? FDE? Can you keep the keys away from Hetzner? How much hacking would they need to do to get them? Can US government break SecureBoot? Im just happy my business is not important enough

Hetzner US would have no power over Hetzner EU, that's the point. All they can do is beg their parent company the same way law enforcement could beg them directly.

Sorry I wasn't clear. I meant I would expect US government to approach Hetzner EU and say "nice Hetzner US business you got going over here, it would be a shame if got hit by a tax inspection. Businesses make tax mistakes all the time you know? We could make sure that doesn't happen if you help us with this law-breaking customer of yours"

Re: Fastmail offers EU data region

#295
post #230

Earlier quoted context omitted.

With 276 MEPs in favor. Vote them out in 2029 if you want to change that.

And 314 voted against. "Chat control 1" is the deliberately misleading name for "Facebook is not banned from using CSAM scanners on your DMs if it wants to" - I don't think it's worth voting someone out based on that. The one that bans encryption is called "chat control 2". I assume they've both got the same name as part of a deception tactic.

No, 314 did not vote against. (Abstentions aren't votes against). Don't lie.

Again, vote out the ones that are in favor and replace them with ones that will vote against the proposal.

Re: Fastmail offers EU data region

#296
post #150

Earlier quoted context omitted.

Love them, but I wish they had a way to upload new sieve rules via an API. I'm probably going to try them with my own domain at some point since I think they have an option to just deliver all mail bound for that domain, which makes setting up random emails for dodgy sites really easy.

I assume they support this part of JMAP https://jmap.io/spec/rfc9661/

Their FAQ says you must use the web interface to edit your rules. But this is worth a shot.

Re: Fastmail offers EU data region

#297
post #148
post #147

Earlier quoted context omitted.

Certainly Van Der Leyen. I suggest you show up for next EU election if you don't like the option.

Clearly you have no idea how the head of EC is chosen. Because of the two only Trump was actually elected by the people.

The elitism of direct democracy is a mystery to me, especially in the case of the US where it is not technically direct and the powers and role of the president are deeply modelled after those of the British crown of the times

Re: Fastmail offers EU data region

#298

EU folks, note the warnings threaded throughout this post: this is not currently any sort of panacea against US or AU data hosting risks, but it will make your data noticeably closer to home. Fastmail (Australia) merged with Pobox (Philadelphia) resulting in a complex tri-national law/risk surface when the EU is involved, so go in eyes wide open having read this in full. That everyone will overinterpret “EU data regi…

I think it's not unreasonable to see this as a first, positive, step. It's certainly giving them some benefit of the doubt, but it doesn't seem unreasonable that, say, the EU server and the US backup will in some time be an EU server and an EU backup.

Also the more companies go in this direction the more "soft power" the EU has on the topic

Re: Fastmail offers EU data region

#299

Earlier quoted context omitted.

They found a cheap way to please the kind of customers who care much about their activism and not much about reality. A good business decision with little risk and a potential upside. To believe your data is any better protected here or there is already unrealistic, and the admiration for the European Union for data privacy among hacker circles is unfounded. But if many people believe something false, you as a busine…

Yeah this I think captures my initial feelings in my post better than I could have put it. Any business that has strict guidelines won't touch this. As there's no real guarantee, and more importantly they have given themselves an out. Whilst I like fastmail as a product, personally I would have waited to get everything in the EU before I launched this, as you've now got to relaunch it once you solve that last mile pr…

To respond to both of you above. Setting up two of these at once would have increased both the up-front cost (hardware for something like this is well north of a million USD) and the complexity and associated risks. Yes, it's partly a "people want it for their own reasons and we should offer it if it's viable" and partly a "it's good to have service in multiple jurisdictions and experience with them in advance of any further balkanization of the internet".

Re-launching might be costly, but dropping millions more on a second location and splitting our systems more would hav been much riskier (note: many of our customers with 'fastmail.com' addresses have chosen the EU region, we can't segment MX records at a tighter boundary than domain level).

So we do what we can - when you login with username and password, the password is only sent to your region's server (based on a lookup from the username which MUST be global, so it works regardless of which of our servers you hit). If you send a username which doesn't exist, we distribute you to a random region in the same percentage, so you can't use it as an existence oracle.

Re: Fastmail offers EU data region

#300
post #171

Earlier quoted context omitted.

Remember that Chat control has gone through vote through directly elected parliament like any other legislation. The next election is in 2029. I suggest you show up instead of spreading fabrications online.

[flagged]

Please don't post flamebait or engage in ideological battle on HN. The guidelines make it clear we're trying for something better here. https://news.ycombinator.com/newsguidelines.html
Post reply on HN