Live data from Hacker News

The FastMail Security Mindset

blog.fastmail.com

71–80 of 301 posts

Re: The FastMail Security Mindset

#71
post #10

Wow what a coincidence — I switched from Gmail to Fastmail exactly 1 year ago today. I couldn't be happier. I mostly use native clients, but the Web client is a joy to use, and everything I've observed about Fastmail gives me confidence in their service. I never used the Gmail-exclusive features like labels, so switching was pretty easy. I highly recommend it to anyone considering it. Keep up the good work, guys.

I'm considering switching (in fact I just registered for the FastMail trial). I'm especially interested in the ability to use catchall addresses with a custom domain, which would allow me to give out an address like , and thus determine who shared my email address if I start receiving spam at that address. This is partly possible with Gmail, as you can use addresses like , but not all sites support emails with a + in…

I used Fastmail for a few years. I switched last spring due to two interactions through support channels that left me really despising the apparent company culture, attitudes about intellectual honesty, and general jerkishness.

You're probably considering switching based on your mail needs, so this might not apply to you, however:

In addition to mail, Fastmail also advertises[1] their plans come with their FastMail Files feature. It can be used for one-off file sharing (akin to Google Drive) and even static site hosting (explained in their support docs[2]). However, I learned from the CEO's comments in my support ticket that they're apparently overprovisioned and don't expect everyone to actually use the storage included with their plans.

I just took a cursory look at their landing and pricing pages and see they aren't touting Files loudly right now. (My initial thought is a hope that they took my remarks to heart from the thread that led to my decision to leave, when I said they should "go tone down the hosted storage aspect of your marketing". However, given that the promotional blog post from [1] occurred within the month that followed my comment, I suspect not.) The blog posts and Fastmail documentation[3] about the Files feature are still available, of course, whether or not it's still on the landing page.

This itself would have been only slightly disappointing, but the bad taste came from the passive aggressive responses in the support thread, that this was the same sort of attitude adopted in a previous (unrelated) support thread from a couple years ago, and that in this most recent incident, they decided to go on the offensive and compare using the 25GB storage space for making backups to abuse. (Their choice example being someone trying to abuse an ISP's lax limits on DNS to tunnel IP over it.) I half expect someone to show up here to try and apply a layer of spin in exactly the same way. Bonus points if they ignore my actual use case, try to make it out as if I was trying to do something I wasn't, and then call me the "disingenuous" one again.

1. https://blog.fastmail.com/2017/03/29/faster-files/

2. https://www.fastmail.com/help/files/website.html

3. https://www.fastmail.com/help/files/usage.html

Re: The FastMail Security Mindset

#72
I don't know if any Fastmail employees read over this, but thanks for finally adding TOTP to the list of 2FA methods! I had been (uneasily) using SMS and wishing you guys would up your game, and I'm glad to see that you did.

Re: The FastMail Security Mindset

#73

I see the usual comment about Fastmail (comparison to Gmail, ProtonMail, web interface, spam filtering performance, servers in the US, ...) but still nothing about the TOS, which seems more important to me So here it is again: - Fastmail can immediately cancel your account for any reason: "The Service Provider may terminate your access to any part or all of the Service and any related service(s) at any time, with or…

> - Fastmail can immediately cancel your account for any reason: "The Service Provider may terminate your access to any part or all of the Service and any related service(s) at any time, with or without cause, with or without notice, effective immediately, for any reason whatsoever, with or without providing any refund of any payments."

Other than the last clause about "without providing any refund", I would expect this from any service provider, and I'd certainly never want to run a service that didn't have this in its terms.

I do agree that the disclosure terms are more permissive than they should be.

Re: The FastMail Security Mindset

#74
I've had to dump Fastmail. I was getting 10-15 very (sexually) explicit spam emails daily slipping through the filter daily even after 100's of training emails being identified. Queue weird looks at work if I left my mail client visible.

Moving back to G Suite was painful. I had to manually do it after the G Suite 'Migration' tool missed 1000's of messages. But so happy to have decent search back!

Re: The FastMail Security Mindset

#75

I only see FastMail and ProtonMail mentioned on Hacker News, never in real life. To those who made the switch away from free,conventional mail services like Gmail and Outlook, what was the appeal ? What's your case for making the switch ?

I use ProtonMail for the simple reason that there is less of a chance they are selling my data and building up a user profile of me for advertisers to target.

I use FastMail for exactly that reason.

And, secondarily, because I set up a GMail account for both of my kids when they were born, and I would occasionally email things to those accounts that I wanted them to have a record of. Nothing earth-shattering, just stuff I thought they might like to read when they were older. Then, one day without warning, Google shut my daughter's account down, for being under-age. I had no ability to retrieve all of those emails, and there was literally no one I could contact. Google has NO customer support, because you aren't the customer. So I decided I would be willing to pay $30 a year just to know that I could get an actual person on the phone.

Re: The FastMail Security Mindset

#77
post #67
post #64

I was a very happy FastMail customer until a hacker asked them to reset my password. After _incorrectly_ answering a handful of questions asked by the FastMail support, the recovery email address was changed and a password reset link sent. From there, the hacker attempted password resets on other services. Initially, FastMail was dismissive that this was a simple "mix-up" and didn't disable access to the hacker for 7…

Dear Fastmal, I am a happy customer, but very concerned by this report. Would you mind to comment?

I just forwarded this comment to their customer support. Let’s see what would be their comment.

Re: The FastMail Security Mindset

#78

Wow what a coincidence — I switched from Gmail to Fastmail exactly 1 year ago today. I couldn't be happier. I mostly use native clients, but the Web client is a joy to use, and everything I've observed about Fastmail gives me confidence in their service. I never used the Gmail-exclusive features like labels, so switching was pretty easy. I highly recommend it to anyone considering it. Keep up the good work, guys.

> the Web client is a joy to use Their web client is the only one I've ever been able to use without wanting to quit email.

When I was moving away from Fastmail, I noticed that Rainloop[1] is a pretty slick, Gmail-inspired webclient, and it's FOSS, but I couldn't find any provider who was actually using it. Can anyone comment?

1. https://www.rainloop.net/

Re: The FastMail Security Mindset

#79

Earlier quoted context omitted.

Been using them for a few years now and they're great. Some things I like: - plays nice with mbsync - sane system: real folders, not labels - customer service with an IRL person - identities feature

Out of curiosity, why do you consider folders to be sane, and labels not? To me I always found labels to be the exact same as a folder, but not bound to a single instance. Ie, it is everything a folder has, and more. What am I missing?

I should have been more clear. Folders play way more nicely with IMAP clients as opposed to gmail labels, in my experience.

Re: The FastMail Security Mindset

#80
post #64

I was a very happy FastMail customer until a hacker asked them to reset my password. After _incorrectly_ answering a handful of questions asked by the FastMail support, the recovery email address was changed and a password reset link sent. From there, the hacker attempted password resets on other services. Initially, FastMail was dismissive that this was a simple "mix-up" and didn't disable access to the hacker for 7…

Did you also have 2fa?
Post reply on HN