Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tutanota is now Tuta

tuta.com

Post reply on HN
Print view View original

101–110 of 137 posts

Re: Tutanota is now Tuta

#101

Post by delfinom »

upofadown wrote: post #87
abc_xyz wrote: post #61

Tutanota likes to tell everyone that they are literally Signal in the email world in terms of security. But there is a known vulnerability in their "E2EE": https://github.com/tutao/tutanota/issues/768 There is no way to verify key fingerprint of your recipient right now. So server can just man-in-the-middle you providing third-party key and read all messages silently. It is not e2e encryption if you have to trust the…

It all comes down to truth in advertising. Such misrepresentations are very common these days. Even Signal is not entirely innocent here. Signal only has the potential to have end to end authentication/encryption. By default you trust Signal, Twilio and the phone company. The app/documentation does not make it entirely clear to the user that verifying the "Safety Number" is critical to establishing an end to end conn…

>It all comes down to truth in advertising

Understatement.

Tutanota published a ranty blog post accusing Microsoft of suppressing competition in the email space. Because they didn't understand how fucking Azure works or even how corporate security works.

They literally let users register email addresses for @tutanota.com At the same time, they are using @tutanota.com for internal corporate and such they had an Azure AD Tenant already registered for that domain.

They complained that their tutanota.com email users couldn't register Microsoft accounts and this was all part of Microsoft's ploy to eliminate them.

No, they compromised themselves and unless they grew a brain, are still compromised for corporate communications.

Re: Tutanota is now Tuta

#102

Post by dngray »

kuratkull wrote: post #43
ValtteriL wrote: post #32

I used Tuta for both private and business use for a couple of years. Switched away because of terrible search experience and lack of SMTP and IMAP access. Tuta became understandably a walled garden that my other tools couldn't easily work with. This wasted alot of my time. Nowadays using $normalemailprovider with Thunderbird.

Same here, the search was horrible and eventually caused me to move away. Using mailbox.org is a much more pleasant experience. Other options: https://www.privacytools.io/privacy-email

> Other options: https://www.privacytools.io/privacy-email

Just so you know the original team behind that site moved to https://www.privacyguides.org/en/email/

We don't list StartMail because it's not really zero knowledge (if you look at their "vault" system it's basically a LUKS container which is "opened" when you login server side). The author of PTIO puts no effort into reviewing/reading or understanding how any of the recommendations work.

Disclosure: I am one of them, the old privacytools website now is mostly an affiliate marketing portal. More info about that can be found here: https://www.privacyguides.org/en/about/privacytools/

Re: Tutanota is now Tuta

#103

Post by laurentlbm »

delfinom wrote: post #101
upofadown wrote: post #87

Earlier quoted context omitted.

It all comes down to truth in advertising. Such misrepresentations are very common these days. Even Signal is not entirely innocent here. Signal only has the potential to have end to end authentication/encryption. By default you trust Signal, Twilio and the phone company. The app/documentation does not make it entirely clear to the user that verifying the "Safety Number" is critical to establishing an end to end conn…

>It all comes down to truth in advertising Understatement. Tutanota published a ranty blog post accusing Microsoft of suppressing competition in the email space. Because they didn't understand how fucking Azure works or even how corporate security works. They literally let users register email addresses for @tutanota.com At the same time, they are using @tutanota.com for internal corporate and such they had an Azure…

That's hilarious!

Re: Tutanota is now Tuta

#104

Post by rubber_ducky »

Tutanota wrote: post #55
kuratkull wrote: post #43

Earlier quoted context omitted.

Same here, the search was horrible and eventually caused me to move away. Using mailbox.org is a much more pleasant experience. Other options: https://www.privacytools.io/privacy-email

Thanks for your feedback. We're planning to re-do the search implementation completely as it needs a major overhaul to quickly search larger mailboxes. We're constantly improving the service, for instance we've just added unlimited email addresses with your own domain ( https://tuta.com/blog/summer-releases-2023 ) so always happy to hear feedback and how we can meet your needs!

Do you have a rough timeline rolling out a better search? It's the biggest issue I have.

Re: Tutanota is now Tuta

#105

Post by tharne »

This is a good move, but I think the domain name for Tutanota needs to be simpler still, or at least more English-friendly if they want marketshare in the anglosphere.

I used Tutanota for a bit. Great product,all around better than protonmail from technical and usability standpoint, but I stopped using it.

Why? You don't realize how often you give out your email over the phone or to someone verbally. "Tutanota" is simply way too easy to screw up. Tootanota? Tutanoda? two-ta-what??? Even when there wasn't a struggle passing this along to someone, I'd always be worried that they wrote it down incorrectly.

I know I could get my own domain, but still, the default email should offer a domain that's easy to spell (e.g. proton.me).

Re: Tutanota is now Tuta

#106

Post by tharne »

unixhero wrote: post #64
abc_xyz wrote: post #61

Tutanota likes to tell everyone that they are literally Signal in the email world in terms of security. But there is a known vulnerability in their "E2EE": https://github.com/tutao/tutanota/issues/768 There is no way to verify key fingerprint of your recipient right now. So server can just man-in-the-middle you providing third-party key and read all messages silently. It is not e2e encryption if you have to trust the…

You can slap PGP on top Presto

You can do this with any email. What's your point? The reason for the rise of email providers advertising encrypted email is because PGP is a pain for most people to use and never saw widespread adaption among regular users.

Re: Tutanota is now Tuta

#107

Post by tharne »

Beijinger wrote: post #45
vincentkriek wrote: post #41

Earlier quoted context omitted.

What is $normalemailprovider? I have been looking for an alternative that is more standard, but it seems like only Fastmail is big in this space. The rest are small shops that don't convey a lot of confidence.

Fastmail is supposed to be good. But you can just buy your own domain with Email hosting. It is free with gandi.net. Or use https://www.infomaniak.com/ Infomaniak also sells email hosting for around 20 Euro per year, they are based in Switzerland. If you have your own domain, just type the domain name as you would buy the domain and if the interface says domain taken, select email hosting (the three dots).

I recently started using fastmail and am generally please with it. The only downside is that it's based in Australia, a country who's hatred of privacy would make even the NSA blush.

Re: Tutanota is now Tuta

#108

Post by newscracker »

tharne wrote: post #107
Beijinger wrote: post #45

Earlier quoted context omitted.

Fastmail is supposed to be good. But you can just buy your own domain with Email hosting. It is free with gandi.net. Or use https://www.infomaniak.com/ Infomaniak also sells email hosting for around 20 Euro per year, they are based in Switzerland. If you have your own domain, just type the domain name as you would buy the domain and if the interface says domain taken, select email hosting (the three dots).

I recently started using fastmail and am generally please with it. The only downside is that it's based in Australia, a country who's hatred of privacy would make even the NSA blush.

An FYI: Fastmail’s mail servers are located in the U.S.

Re: Tutanota is now Tuta

#109

Post by newscracker »

vincentkriek wrote: post #41
ValtteriL wrote: post #32

I used Tuta for both private and business use for a couple of years. Switched away because of terrible search experience and lack of SMTP and IMAP access. Tuta became understandably a walled garden that my other tools couldn't easily work with. This wasted alot of my time. Nowadays using $normalemailprovider with Thunderbird.

What is $normalemailprovider? I have been looking for an alternative that is more standard, but it seems like only Fastmail is big in this space. The rest are small shops that don't convey a lot of confidence.

I usually suggest people to take a look at these: mailbox.org, runbox.com, mailfence.com, posteo.de (this last one doesn’t support custom domains). They’re all cheap enough, provide IMAP and POP, and are located in different countries in Europe.

Re: Tutanota is now Tuta

#110

Post by uconnectlol »

unixhero wrote: post #64
abc_xyz wrote: post #61

Tutanota likes to tell everyone that they are literally Signal in the email world in terms of security. But there is a known vulnerability in their "E2EE": https://github.com/tutao/tutanota/issues/768 There is no way to verify key fingerprint of your recipient right now. So server can just man-in-the-middle you providing third-party key and read all messages silently. It is not e2e encryption if you have to trust the…

You can slap PGP on top Presto

you cant because tutanota has no POP/SMTP/IMAP so its basically just a web form. you could of course add PGP to any such communication medium but it wont be very standard
Post reply on HN