I’ve been looking to switch from gmail to a different email provider that’s more private. I’ve been hearing about Tuta, are there any drawbacks to it? Are there better options?

For a while I was planning on making the switch to protonmail but that’s off the table now due to the recent events surrounding them.

I didn’t like that Tuta didn’t support IMAP which means I am locked in to using their client. I self host my own CalDAV and carddav servers for calendar and contacts and wanted a single client for mail/calendar/contacts. Without IMAP support I could not do that. I ended up going with fastmail and am okay with the privacy tradeoff of no end to end encryption.

@nfreak@lemmy.ml
link
fedilink
3
edit-2
16d

I’ve been using it for a few months now. Works just fine, doesn’t do anything fancy but it doesn’t need to. Filter rule creation is pretty limited, and the desktop client doesn’t play well with my VPN for some reason, but otherwise it works fine.

If you don’t want to run your own mail server then there will always be a trade off somewhere. That trade off could be high costs to pay a tech firm to run a private mail server for you, could be lack of features, could be privacy, could be a lot of things. Even with your own mail server there will be trade offs around security etc. depending upon your skillset.

Personally, I have a hybrid approach.

  • Business is on a mail server
  • Personal with sensitive data (health, bills, etc.) is on a mail server
  • Personal - subscriptions, newsletters, etc. is on Proton
  • Everything else is on Gmail

I also have other accounts (e.g. DDG, Apple Mail, for specific use cases, but I forward the content I receive there into Gmail.

I’ve had a look at Tuta and haven’t seen enough to convince me to move anything there. I’m not going to move my mail servers to a cloud provider, Gmail is there because the address is 20 years’ old and I can’t be bothered updating everywhere that it’s used, and Proton has been great for years, has grown well, and has a corporate mission that I agree with. DDG, Apple Mail etc. is what the internet sees of me - They generate unique email addresses and then I forward the content I want into Gmail, or sometimes Proton.

eight_byte
link
fedilink
517d

I am very happy with Proton.

monsterpiece42
link
fedilink
717d

What did proton do wrong? Legit question, I’m out of the loop.

Nothing. It’s just FUD.

Here’s an article about it: https://medium.com/@ovenplayer/does-proton-really-support-trump-a-deeper-analysis-and-surprising-findings-aed4fee4305e

Even if the CEO did support the orange turd, I would personally still be able to separate his personal opinion from what the non profit is doing.

@ycnz@lemmy.nz
link
fedilink
9
edit-2
16d

He explicitly supported the republican party in its current guise. That’s enough for me to run. Fastmail is where I’ve temporarily landed - would prefer somewhere away from Aussie jurisdiction, but it felt like the least-shit.

Great source, thanks :)

monsterpiece42
link
fedilink
117d

That was informative, thanks.

I agree with you, I would be extremely surprised if the Proton CEO supported Trump… I would say very unlikely.

Very thinly veiled tho… It’s not an immediate threat, but it’s best to just move away from it if you can.

It’s not Tuta but I adore Fastmail.

No BS. No gimmicks. Just privacy aware, protocol conformant E-mail at a reasonable price.

5€/month for email? 😵

@feoh@lemmy.ml
link
fedilink
116d

Services cost money to run. Either you pay for the product or you are the product.

Make your choice, name your poison. No skin off my nose in any case :)

I mean I self host for 4€/month and I could fit multiple emails in there

Email is pretty much just about storage at some point, and there are a lot more cost effective servers for this, than a simple VPS

@feoh@lemmy.ml
link
fedilink
110d

Self hosting email is a non trivial effort. I’ve done it before and am in zero rush to do it again.

And before you tell me “Oh hey I’ve had no problems at all with delivery getting blocked by GOOG or MSFT” good on you but that has NOT been a lot of people’s experience trying to self host their E-mail, including mine.

@ycnz@lemmy.nz
link
fedilink
616d

Yeah. Email’s actually quite unpleasant (not hard) to do well. Look sideways at anyone doing it free or super-cheap.

@azalty@jlai.lu
link
fedilink
1
edit-2
16d

I’m selfhosting with mailcow and it’s great

Yes.

sbird
link
fedilink
817d

I’ve tried tuta before. It seems pretty okay, but it doesn’t support IMAP meaning you have to use their app, and (at least for me) it was SLOW.

I personally use disroot, but there’s loads of other options, like mailfence seems like a decent alternative. Just pick one that supports IMAP

I’m using Tuta and their app for a few years now. The app was slow indeed but it’s good now, no problems so far. Lack of IMAP support is justified with security, they say. I personaly don’t need IMAP as I’m completely satisfied with the app, which is available officially in f-droid btw.

sbird
link
fedilink
417d

yk, fair enough. if you like it, that’s fine by me

No single organization should be trusted. “Emails paint an intimate narrative of ourselves — the people we talk to, the books we read, the politics we practice. This information is powerful. When we lose control over it, it can do great harm to ourselves and our loved ones.” https://ideas.ted.com/why-we-should-all-care-about-encryption-really/

What’s the practical takeaway here? Just don’t have an email basically

Take control of your data. Host your own email or use a provider that cares about your privacy.

We talk about this so often in privacy communities because, although emails are particularly difficult to secure, they’re so important. Swapping your email provider or hosting your own is so easy to say and so hard to do, but so worth doing. I would suggest taking some steps towards FLOSS/FOSS and other privacy-friendly options in other areas first to get used to the idea of change and some of the difficulties you’ll handle in that realm

What’s the practical takeaway here? Just don’t have an email basically

@Cgers@lemmy.dbzer0.com The takeaway here is not “don’t use email at all.” You can employ OpenPGP, and encrypt your emails. Also, host your own keys. Perhaps don’t allow a single corporation to have your private key and access to your encrypted messages simultaneously.

I recommend mailbox.org instead.

confuser
link
fedilink
518d

I started using fastmail, best thing I decided to do in awhile

Arthur Besse
link
fedilink
4
edit-2
18d

Tuta’s product is snake oil.

A cryptosystem is incoherent if its implementation is distributed by the same entity which it purports to secure against.

If you don’t care about their (nonstandard, incompatible, and snake oil) end-to-end encryption feature and just want a freemium email provider which (purports to) protect your privacy in other ways, the fact that their flagship feature is snake oil should still be a red flag.

Is there anything about Startmail (company that does Startpage.com) that is worth avoiding? I’ve never paid for mail but if it’s solid and avoids Google I might.

Arthur Besse
link
fedilink
718d

StartPage/StartMail is owned by an adtech company who’s website boasts that they “develop & grow our suite of privacy-focused products, and deliver high-intent customers to our advertising partners” 🤔

They have a whitepaper which actually does a good job explaining how end-to-end encryption in a web browser (as Tuta, Protonmail, and others do) can be circumvented by a malicious server:

The malleability of the JavaScript runtime environment means that auditing the future security of a piece of JavaScript code is impossible: The server providing the JavaScript could easily place a backdoor in the code, or the code could be modified at runtime through another script. This requires users to place the same measure of trust in the server providing the JavaScript as they would need to do with server-side handling of cryptography.

However (i am not making this up!) they hilariously use this analysis to justify having implemented server-side OpenPGP instead 🤡

Wow, that is very disappointing. I had started using startpage as a Google alternative. While it still may be preferable to Google specifically, their mail product is definitely out.

@geography082@lemm.ee
link
fedilink
0
edit-2
18d

I have the feeling people actually need to have the urge from panic to have to migrate all their data.

No PGP support kinda kills it imho

I’ve had a bug with the android app where sometimes notifications for emails just don’t happen. I’ve received a new email notification, opened the app, and found that the notification was for an email received 5 hours ago, and I didn’t get any notification for the email 3 days ago or the email 1 hour ago.

Despite this issue and several other minor issues, I still recommend Tuta. Mostly because I can’t find anything better.

FriendOfDeSoto
link
fedilink
218d

If you’re on Android, by any chance, have you gone through all the battery optimization, background process killing, and startup settings? Some OEM’s versions of Android are real bad in that way. Giving the app the right settings and permissions may decrease the number of delayed notifications like that.

I am using Android until I can find an alternative. I’ve turned off all optimisations I can find. I haven’t had the issue in a few weeks, but it did happen once since changing settings. I’m hoping that something random I did (like a phone restart) somehow fixed everything.

I am using Android until I can find an alternative

You mean you’re considering something like PostmarketOS? Just wonder where people are looking for alternatives.

I’m looking everywhere I can. I haven’t found any OS that works with my current phone (Nokia G42), and the aren’t too many phones that meet my needs (dual Sim, small, headphone jack, repairable, runs open source OS).

I’ve given up actively searching and I’m mostly browsing Lemmy and hoping to stumble across something useful. Please let me know if you have any more suggestions.

This happens to me as well. It’s a bit annoying but I still prefer it over others.

Create a post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

  • 0 users online
  • 124 users / day
  • 1.05K users / week
  • 1.3K users / month
  • 4.58K users / 6 months
  • 1 subscriber
  • 3.54K Posts
  • 89.4K Comments
  • Modlog