this post was submitted on 12 Nov 2024
83 points (100.0% liked)

Ask Lemmy

26858 readers
1786 users here now

A Fediverse community for open-ended, thought provoking questions

Please don't post about US Politics. If you need to do this, try [email protected]


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either [email protected] or [email protected]. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email [email protected]. For other questions check our partnered communities list, or use the search function.


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 1 year ago
MODERATORS
 

I've got a couple of e-mail addresses with the main providers, but I'm looking to switch to an ad-free and more secure provider.

I've been looking at ProtonMail, but what do you guys use or recommend?

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 5 points 1 day ago

After a Tuta vs Proton comparison, I went for the first because of their use of renewables, and I’ve been there for over a year now after fully ungoogling. Their search kind of sucks, but I feel they focus on creating a safe service with neat features, so I’m staying. I also combine it with SimpleLogin. Awesome service!

[–] [email protected] 43 points 1 day ago (2 children)

I've been using Proton Mail for a while, it's been good for me.

[–] [email protected] 11 points 1 day ago (4 children)

Is the free tier truly free? The saying, “if a product is free, you are the product” comes to mind.

[–] [email protected] 16 points 1 day ago

It's covered by paying users. I'm one and happy to have my subscription cover Anyone who wants a free, private email address.

[–] [email protected] 9 points 1 day ago (1 children)

It is, they can’t access anything it’s all encrypted and truly private to you. My only problem with the free tier is that there’s a signature at the bottom saying it was sent with proton mail, which isn’t even a big deal you just have to remember to remove it every time you send something. That and the 1 gig storage limit fills up quicker than you’d think.

[–] [email protected] 10 points 1 day ago (1 children)

They ~~can't~~ don't access anything...

Email comes in from everywhere unencrypted via SMTP. Proton may be a great company, but let's make sure everyone recognizes that email (without E2E PGP) is inherently open to anyone in the chain, including at Proton, who's snooping.

[–] [email protected] 2 points 23 hours ago (2 children)

I could've sworn Proton used e2e encryption (with other proton users I suppose) and that was part of why it didn't integrate well with third party tools. But yes, even if it is, the majority of people/services that you email aren't e2e encrypted so it's very important to remember.

[–] [email protected] 3 points 6 hours ago

Yup! That's their implementation of E2E I mention above, should have been more specific there.

External users with PGP, or internal users of Proton mail stay encrypted. The other 99.99% of emails come in unencrypted until they are saved to the inbox.

[–] [email protected] 1 points 17 hours ago

They do have e2e for emails. Any emails between Proton Mail users are always e2e encrypted, as are any emails others send you which they've encrypted with their own maio client. If someone sends you an email unecrypted (most email is), then Proton will encrypt it for you and put it in your inbox. They can't read it after that, but there is some trust required that they don't store/look at the unecrypted email before then.

[–] [email protected] 7 points 1 day ago

As far as I can tell, yes. I signed up for the free tier before paying for the service, and the worst I ever got was a banner here or there advertising their paid service. Proton encrypts all your data with your password, so they literally can't access it even if they wanted to. The only info they have on you are things like when you logged in and your IP address (and I believe they've turned that info over to law enforcement when required, like any legitimate company would have to do), but their servers are in Switzerland where there are better privacy laws.

[–] [email protected] 3 points 1 day ago

I used their free email for years with no issues

[–] [email protected] 3 points 1 day ago

I went to the trouble of creating a custom domain and pay for that service and I have no problems with it. I subscribed at the level that gives me the VPN which works very well and blocks most ads and trackers.

[–] [email protected] 4 points 1 day ago (1 children)

I've been using Posteo for a while now. They have the most sane privacy policy out there. They also support IMAP and POP3 ootb for external email clients, unlike some other email providers (e.g. Protonmail).

[–] [email protected] 1 points 3 hours ago

I also use Posteo, one thing to note though is that Posteo doesn't (and probably won't any time soon) support custom domains. If that doesn't bother you, it's a great choice.

The other alternative I found during my research, which doesn't have that limitation, is mailbox.org.

[–] [email protected] 5 points 1 day ago (1 children)
[–] [email protected] 1 points 1 day ago

I would like to have an email, please

[–] [email protected] 12 points 1 day ago (2 children)

I've used Mailbox.org for years as a service that replaces most of my Google services at once. I know you just asked for email and Mailbox is worth checking out.

[–] [email protected] 2 points 1 day ago

+1 for mailbox, have had their 1€ tier for a year now, definitely worth it. Works great with ThunderBird and K-9 Mail.

[–] [email protected] 4 points 1 day ago

I can vouch for Mailbox, too.

It's also easy to get it set up on third part email clients.

[–] [email protected] 11 points 1 day ago (1 children)

Fastmail. Proton is too limited and has terrible search

[–] [email protected] 4 points 1 day ago (1 children)

I’ve been with Fastmail for a year and it’s always been a very positive experience. Good support. If I had to pick a weak link, I think the spam filtering could be better.

[–] [email protected] 2 points 1 day ago

I've not actually had any I don't think, although one thing which is marked as spam... Isn't. I don't seem to be able to prevent that one email going there, it's irregular though.

[–] [email protected] 9 points 1 day ago (2 children)

I've been impressed with Fastmail. I also use Tuta, which is pretty cool (but I barely use it).

[–] [email protected] 3 points 1 day ago (1 children)

I switched from Tuta to Fastmail. Tuta was mostly fine, but being restricted to only their client was really annoying. I can use Fastmail with Thunderbird/FairEmail/etc just fine.

I get what Tuta is trying to do with encrypted email, but IMO they're better off joining up with Fastmail on better specs that allow for the things they want to do, instead of limiting what email clients you can use.

[–] [email protected] 2 points 1 day ago

The inability to use my own client was the deciding factor of why I did not go with Tuta when I was email shopping. They've got good features and a fair price but that one decision is a serious turn-off imo.

[–] [email protected] 4 points 1 day ago

I've been pretty happy with Tuta. I just have a free account, but it does seem like it has pretty good features and phenomenal security.

[–] [email protected] 8 points 1 day ago (1 children)

I roll my own. Postfix, dovecot, spamassasin and dmarc friends. Easy to setup? No. But takes about an hour/year of my time to maintain once the ball is going.

[–] [email protected] 3 points 1 day ago (3 children)

do you happen to have done guide in place, or some docker compose I can look at?

[–] [email protected] 2 points 1 day ago

The best option is https://github.com/docker-mailserver/docker-mailserver

I've tried them all, and this one I super-easy in comparison. Great documentation and just some ENV variables and you're done. Happy to share my compose file with you if you want.

I use it with my Active Directory hosted with https://github.com/Fmstrat/samba-domain for users, but it has many different user options.

[–] [email protected] 3 points 1 day ago (2 children)

mailcow is by far the easiest way to self host email: https://docs.mailcow.email/getstarted/install/#initialize-mailcow

Be aware that it's significantly easier to host on smaller trusted hosting providers. Hosting this on cloud providers like DigitalOcean is almost impossible without getting blacklisted.

[–] [email protected] 1 points 1 day ago

Haven't used Mailcow in a while, but personally I found https://github.com/docker-mailserver/docker-mailserver better at the time. Great docs, many features.

[–] [email protected] 1 points 1 day ago* (last edited 1 day ago) (1 children)

I've never heard of mailcow specifically, but I was intentionally avoiding all-in-one packages when setting up. Life has proven that good things aren't easy and easy things aren't good.

And so far I'm happy with that decision - setup is modular, was already able to extend it with postfwd, dual dkim signatures (rsa and ed25519), mta-sts and some other policy I can't recall right now.

I've also specifically wanted to run as little code as possible that's exposed to the internet - as such, I chose to not have webmail.

[–] [email protected] 1 points 1 day ago* (last edited 1 day ago) (1 children)

I also hosted my mail directly with Postfix and Dovecot back in the day before the all-in-one packages were a thing.

mailcow has reduced my yearly maintenance from a few hours to a few minutes. Addtionally it runs in Docker, meaning each service is fully isolated and it can be updated with a single command and without headache. Also includes a really handy web interface to configure each of the services, it even does 2FA if you are worried about security.

Have been running it since before it was using Docker and have 0 complaints, it always works and always improves.

[–] [email protected] 1 points 1 day ago

Happy it works for you!

I'm running it on arch so that I never have to go through big upgrades. Been over 5 years now - so far, so good!

In regards to docker - it's just a container. You can make any executable run a container. I quite like a lean system myself, though.

[–] [email protected] 2 points 1 day ago

I don't, but I could probably come up with one next weekend.

[–] [email protected] 5 points 1 day ago
[–] [email protected] 7 points 1 day ago (2 children)

I've had nothing but positive experiences with Posteo. Their features list is very good for the pittance they charge per month.

[–] [email protected] 2 points 1 day ago

I agree. I also use Posteo. Their privacy policy and website seem to be one of the most sane ones. They also allow you to use external email clients.

[–] [email protected] 1 points 1 day ago* (last edited 1 day ago) (1 children)

im just overwhelmed by the endless flood of minor services that leach "a dollar here.. a dollar there". add them all up and they drain you dry.
skip some and you lose essential coverage. "just $2 more a month.. i swear bro! "

[–] [email protected] 2 points 1 day ago

Posteo isn't a monthly charge to your credit card. It uses a credits that you can top up whenever you feel like it. I usually put in a year's worth of credits in advance which costs me around $17CAD.

[–] [email protected] 6 points 1 day ago

I've been paying for Tuta for a couple years, and like it. I have my gmail forward to it just in case, but these days have basically completely switched, and barely ever get any legit emails forwarded from my gmail anymore.

[–] [email protected] 5 points 1 day ago* (last edited 1 day ago)

Addling a vote for Fastmail. It’s great, priced right, privacy centric, has wicked 1Passwold integration (including disposable email addresses) and nerdy features for those who want them.

Personally I use Hey but that’s because imma snob.

[–] [email protected] 5 points 1 day ago (1 children)

I’ve come to the end of my patience with hotmail/live, my email is out there on a list so I get tens of spam mails a day and they almost never correctly identify them, but any new service I sign up to and it goes straight to spam.

Proton mail seems expensive for a single offering and the bundle has too many unnecessary things I don’t need. Also the lack of protocol support means you are restricted on clients you can use.

I’m pleased you posted this as I’m going to give all these a try too, but I’m becoming a pessimist and I’m thinking as soon as I’ve fully switched they will put up the price. Your personal email is becoming one of the hardest things to change.

My top priority is the ability to have individual addresses for each service I use going to a single inbox, that way if my email is leaked by a company, I can just nuke that alias, and I’ll know who leaked it. May be a good feature for you too?

[–] [email protected] 4 points 1 day ago* (last edited 1 day ago) (1 children)

Register your own domain! Pick a paid email service that supports it and then you never have trouble moving to a new provider again.

If you get an email provider that does a catchall then you can just make up emails on the spot and any email to any address on your domain will pop into your inbox.

I get simplelogin with Proton and I love that too, generate new email addresses that can't be tied to you but all go to your one inbox.

BTW your concerns with Proton are valid and it can be annoying not being able to use an alternate app for mobile.

[–] [email protected] 2 points 1 day ago (1 children)

What is the most privacy focussed way to register a domain these days?

last time I did it was about 20 years ago and they pretty much just put your home address and telephone number in a Whois lookup.

[–] [email protected] 2 points 1 day ago

It depends specifically on the registrar as to whether there is an option to hide those details.

However, many places offer domain privacy services, where they put in their addresses and forward on any contact. Such as https://www.namecheap.com/security/what-is-domain-privacy-definition/

[–] [email protected] 3 points 1 day ago

I've always heard fastmail as the go-to for personal domain email hosting. They're the go-to for almost everyone I know who doesn't just setup forwarding to Gmail.

[–] [email protected] 1 points 1 day ago

OVH has email hosting. I mostly use them for other services but I've had positive experiences with them.

https://www.ovhcloud.com/en/emails/