Live data from Hacker News

Tutanota is now Tuta

tuta.com

81–90 of 137 posts

Re: Tutanota is now Tuta

#83
post #70

Earlier quoted context omitted.

"So everything with their service has to be done through their apps." What sane person would do this? Use infomaniak instead (Switzerland). Tuta seems to be a German company. There is another one, I forgot the name but a few friends of mine were using it. I used google, could not find it but I am actually surprised that there are many providers. E.g. https://www.qualityhosting.de/hosted-exchange/hosted-exchang... htt…

>What sane person would do this? I use Gmail, and have exclusively used the web app and Android app to access it, for, what, 15 years? I don't think it's insane, if those apps work well.

Indeed, it seems that if you don't run your own kubernetes you're not cool enough.

Products should just work the way they are intended to be. Apple built an empire on this simple concept.

But hey, "open source all things" have decided I must use 4 products from 4 different providers to send an receive emails so that I am "safe".

Re: Tutanota is now Tuta

#84
Tutanota is one of the uglier and at the same time pretentious projects. As far as I'm concerned, this crap can't be called e-mail at all. This is some crookedly made homemade work. They don't support the usual protocols for receiving mail, the search is just terrible, all kinds of freaks use them for their dark business, so these left-handed idiots have even started to be added to ban lists. I recently spent half a month persuading the bank because I stopped receiving notifications. And I would also like to see the "engineer" who invented encrypting letters to other providers using a "password". Well, that is, this whole team of developers, managers - they were not upset by such an idea at all. Implement PGP? Let everyone post public keys and write to each other? No! What nonsense! It's better to go somewhere through a browser and enter some crappy password. And should I trust these bastards with my mail? I would spit in their face. I think this row should be filed for bankruptcy.

Re: Tutanota is now Tuta

#85
post #50

Earlier quoted context omitted.

Not sure what qualifies as "normal", but I've been happy with mailfence.com for a few years now. I rarely see them mentioned in privacy lists, which I appreciate, as I don't want them to get too much attention. :) They're based in Belgium, and have a solid stance on privacy and security. They provide IMAP/SMTP access, calendar/CalDAV, contacts/CardDAV, custom domain names, filters, spam blocking, etc. It's a pretty w…

Yeah, no way mailfence is that privacy friendly. https://www.hindustantimes.com/cities/mumbai-news/how-cops-c... The police were able to get a lot of info from mailfence to catch a stupid student who thought using a vpn and mailfence would enable him to send threats easily to the richest man in india. The police got info on how many accounts were from this country, how many of them were active, monitor the mail accou…

No reputable email service will allow you to use it to commit crimes. If the activity is against their ToS, and they get a legal warrant to provide information to the authorities, then this goes beyond any reasonable expectation of privacy.

Mailfence is pretty open about this[1]. Their privacy policy[2] also seems reasonable. Their only obligation is complying with Belgian law, and I'll take that any day over a service within the Five Eyes jurisdiction.

[1]: https://blog.mailfence.com/transparency-report-and-warrant-c...

[2]: https://mailfence.com/en/privacy.jsp

Re: Tutanota is now Tuta

#86

Earlier quoted context omitted.

Fastmail is supposed to be good. But you can just buy your own domain with Email hosting. It is free with gandi.net. Or use https://www.infomaniak.com/ Infomaniak also sells email hosting for around 20 Euro per year, they are based in Switzerland. If you have your own domain, just type the domain name as you would buy the domain and if the interface says domain taken, select email hosting (the three dots).

You can also get your own domain, and have FastMail host your e-mail with that. It has the benefit of not tying your e-mail address to any single e-mail hoster: you own the domain for it. FastMail has excellent documentation to get this set up. Migrating there from GMail (were I already used my own domain) was a breeze.

I'll second this. Moved from Gmail as well.

Re: Tutanota is now Tuta

#87
post #61

Tutanota likes to tell everyone that they are literally Signal in the email world in terms of security. But there is a known vulnerability in their "E2EE": https://github.com/tutao/tutanota/issues/768 There is no way to verify key fingerprint of your recipient right now. So server can just man-in-the-middle you providing third-party key and read all messages silently. It is not e2e encryption if you have to trust the…

It all comes down to truth in advertising. Such misrepresentations are very common these days. Even Signal is not entirely innocent here. Signal only has the potential to have end to end authentication/encryption. By default you trust Signal, Twilio and the phone company. The app/documentation does not make it entirely clear to the user that verifying the "Safety Number" is critical to establishing an end to end connection with someone. From the Signal documentation:

>Verification of safety numbers is a good security practice for sensitive communication.

It is perfectly OK for a user to trust, say, Tutanota to not take an affirmative action to get access to their messages. We need a way to express this sort of tradeoff and providers should be required to put this expression where the user can see it and understand it.

Re: Tutanota is now Tuta

#88
post #70

Earlier quoted context omitted.

"So everything with their service has to be done through their apps." What sane person would do this? Use infomaniak instead (Switzerland). Tuta seems to be a German company. There is another one, I forgot the name but a few friends of mine were using it. I used google, could not find it but I am actually surprised that there are many providers. E.g. https://www.qualityhosting.de/hosted-exchange/hosted-exchang... htt…

>What sane person would do this? I use Gmail, and have exclusively used the web app and Android app to access it, for, what, 15 years? I don't think it's insane, if those apps work well.

Your example is wrong. Gmail offers standard email services that you CAN access via a proprietary Google app OR to a regular app. I use my gmail account with IMAP via Thunderbird. As long as IMAP access is offered, everything is fine.

As a word of caution: Should you ever lose access to your gmail account, you run into deep trouble. I currently can't access my gmail. I know the password, I have access to my backup email but it won't let me log-in except if I am able to confirm it on my android phone. And my US android phone is out of service. I have to fly to the US to get this working again (Google project fi).

Re: Tutanota is now Tuta

#89

Tutanota is one of the uglier and at the same time pretentious projects. As far as I'm concerned, this crap can't be called e-mail at all. This is some crookedly made homemade work. They don't support the usual protocols for receiving mail, the search is just terrible, all kinds of freaks use them for their dark business, so these left-handed idiots have even started to be added to ban lists. I recently spent half a…

They should replace the T with P on the new name, epic lolz

Re: Tutanota is now Tuta

#90
post #83
post #70

Earlier quoted context omitted.

>What sane person would do this? I use Gmail, and have exclusively used the web app and Android app to access it, for, what, 15 years? I don't think it's insane, if those apps work well.

Indeed, it seems that if you don't run your own kubernetes you're not cool enough. Products should just work the way they are intended to be. Apple built an empire on this simple concept. But hey, "open source all things" have decided I must use 4 products from 4 different providers to send an receive emails so that I am "safe".

"But hey, "open source all things" have decided I must use 4 products from 4 different providers to send an receive emails so that I am "safe"."

Depends. For my mother? She is fine with gmail. But an IT savvy person should consider having their own email domain. And why not host your own rss reader and a few other things. It is rarely a good idea to buy this out of one hand. So domain registrar (e.g. internet.bs ), email hosting (e.g. infomaniak.com ) and hosting (e.g. nearlyfreespeech.net ). So we are close to your 4 different providers.

"Products should just work the way they are intended to be."

Until they don't. Until you get blocked (try calling google email customer service). Or until they go bankrupt. Your license? Sorry, the server for license validation does not exist anymore. Or until somebody decides what you can do with the product and what not. Doing your own thing and using open source gives your freedom.

if you don't pay for the product you are the product.

Post reply on HN