351–360 of 589 posts
i'm going to miss inbox so much. 1. Reminders together with emails in same inbox. 2. Can change Reminders text. 3. Bundling. 4. Snooze Repeat. 5. Snooze Location (RIP). 6. Google Keep Reminders. Not sure how i'll manage my life back after March 2019.
I'd pay $20 for a smartphone mail app that works like inbox. A lot of people probably would.
For personal mail, Zoho is hard to beat. Free up to 5GB and $36/year for up to 30GB. They also communicate very well about any downtimes, disruption, which is extremely rare. Also, there is real customer support. I've accidentally deleted spam messages and they recovered it within hours after shooting one email.
I'd like to switch to Fastmail, but I have a handful of seldom-used secondary accounts (e.g., for family members), and it doesn't make sense to pay $5/mo/each when they're free on G Suite. Their pricing structure is designed for organizations or single users, but somehow my use case falls in between. It seems a bit off that my household can stream as many movies as we want for $11/mo, or have unlimited access to an e…
I haven't read all the comments but so far from what I have read I haven't found anyone mentioning Protonmail. Is it bad? Or not that known to people?
Earlier quoted context omitted.
You should be using your own domain anyways.
Last time I tried this, I found a lot of corporate spam filters seemed to (silently) drop my emails, so I went back to using GMail out of frustration. Is there anything you do that helps with this? I was using GApps and I don't think my domain name was too spammy (samlewis.me).
Earlier quoted context omitted.
We are moving away from Amsterdam - so it will be full copies on both sides of the USA, and nothing in Amsterdam any more.
This makes me sad, but I'm sure there are reasons for this. Would it be possible to explain them (or link me to a document explaining them)?
At that point, why bother? We'd have to run two EU datacentres to have data only in EU, and we'd still be under the same actual legal jurisdiction (Australia) either way, so it would be security theater rather than an actual change in risk. We haven't ever given data to US authorities directly, we point every single request from anyone to the Mutual Assistance Treaty with Australia, and that would be the same regardless of where servers are.
In summary, having servers in the EU is 99% security theater, and the other 1% is pointless unless we had two datacenters who were as reliable as NYI have been for us. We haven't found such partners.
> What email service is best for privacy? There's no simple answer, because it comes down to your threat model. What do you want to keep private? Just content? Or also metadata, including your identity and the identities of your correspondents? And who are your adversaries? Random cybercriminals? Competitors? The email provider? Criminal investigators? Foreign intelligence agencies? Your government's intelligence age…
> OK, so the email provider is considered an adversary.
I don't think Gmail is considered an adversary, it's just that you can now no longer log in to Gmail without also logging in to the same account in Chrome, which is a stupid non-user-friendly feature.
Earlier quoted context omitted.
+1 for FastMail — I've been using it for the last 2 years and I've got nothing but praise for them. ProtonMail seems to be another popular alternative, but their E2E encryption claims sound like snake oil to me, but snake oily as it is, it's still a better choice than Gmail.
I'm a Protonmail user. E2E isn't snake oil but it does assume you have an alternative secure channel for password exchange. I like the fact that my mail archive is encrypted even though I don't send encrypted mail to others.
Here are some arguments:
1. if it's encryption in the browser via a web interface, then it's not secure; the moment a web form asks for a password that can be used to decrypt your data, that's the moment your alarms should go off, because in spite of the claimed E2E encryption, their security might actually be worse than Google's
2. with email you're communicating with the world and the email world is not encrypted; what this effectively means is that ProtonMail keeps your email encrypted only while it is at rest; maybe it's better than what Google does, but they can still see whatever comes in or goes out in plain text and you're still relying on their promise to do no harm
3. ProtonMail needs to use a "bridge" in order to be compatible with email clients; this means that access to ProtonMail is non-standard (e.g. SMTP, IMAP) and therefore you still have the lock-in of Gmail, only it's now worse
4. It creates a false sense of security. If you want real information security, better tools are needed; various chat apps are much better, plus actual GPG ... because the PGP model requires a "chain of trust" that you have to maintain yourself for actual security
Earlier quoted context omitted.
You should be using your own domain anyways.
Last time I tried this, I found a lot of corporate spam filters seemed to (silently) drop my emails, so I went back to using GMail out of frustration. Is there anything you do that helps with this? I was using GApps and I don't think my domain name was too spammy (samlewis.me).
Earlier quoted context omitted.
We are moving away from Amsterdam - so it will be full copies on both sides of the USA, and nothing in Amsterdam any more.
Why isn’t it actually possible to just encrypt saved emails on server? So that government does not have access. Couldn’t one use a hash of the password as key for the data for the data and not save that hash to check password but another one. This way (practically), at least if the password is not eavesdropped and saved by the mail provider, it would be much harder to give away emails.
Impementing per-message-encryption would turn us into a dumb blob store. The whole point of FastMail is the value add - fast search, ability to deal with a lot of email quickly, etc.
That and people's devices are basically always on these days, and fetch new email immediately on a push when messages arrive. So if your provider get a subpoena or gets hacked, then a push request will make your device connect with the password, and boom - access granted.
Finally, we don't let people store master passwords on their devices any more, because they get leaked due to hacked devices, so we require people to create app passwords. This would be in direct opposition to many of the other safety things that are done.
(extra finally: phishing protections and antispam solutions are in pretty much direct opposition to the idea of the server not being able to see the content of emails)