full mailbox encryption
still support regular imap
Hmmm, how? For me, it sounds like they are either talking about OpenPGP which everyone can use OR it’s, sniff, bs.
Ghoelian@piefed.social 1 day ago
I’ve been happy with mailbox.org so far. They offer full mailbox encryption, but unlike proton still support regular imap and smtp. You just need a mail client that supports pgp en/decryption (thunderbird does, both desktop and android).
diaphragmwp@discuss.tchncs.de 1 day ago
quick_snail@feddit.nl 16 hours ago
The way it works is that it’s encrypted server side with your password.
If the server isn’t infected, they can’t read your email. If the webmail server is infection, they could store your password on author (instead of just hashing it immediately) and decrypt your email.
The mitigation to this risk of server integrity compromise is PGP
diaphragmwp@discuss.tchncs.de 14 hours ago
Okay. New mail arrives. Plaintext, SMTP. You have not logged in today. To store it, it needs to know your password…
About as good as a gate in the middle of a field. Better just use POP3.
Ghoelian@piefed.social 21 hours ago
It is openpgp, but I’m not aware of another mail provider that allows you to encrypt every mail when it arrives. Mailbox.org does have to manage this key though of course, but it can be a separate one from what you use to sign / encrypt sent emails.
sbeak@sopuli.xyz 1 day ago
I will look at mailbox then, it seems pretty neat!
shirasho@feddit.online 1 day ago
Proton does support IMAP, though it is through a desktop app. IMAP is weak security since it uses basic authentication, so I’m not sure why you think integrated support for IMAP makes a service better or more secure.
There has been a lot of Proton hate recently, much of it being highly misinformed or just looking for reasons to shit on them. I’d love if people could give me real reasons they dislike Proton.
sbeak@sopuli.xyz 1 day ago
And that’s the problem, the requirement for “Proton Bridge” isn’t the greatest. I would rather have proper IMAP support, as the protocol supports PGP encryption if you do need secure communication, which will be intercompatible with other mail services.
I don’t like how they are pushing people to adopt the Proton “ecosystem” of services that is all tied to a single account, I would rather not have everything in one basket. They also don’t have a Linux client for Proton Drive, so it rules that service out for me.
Their CEO is also super pro-Trump and pro-GOP, which is always a red flag. The company now states that they are “politically neutral”, but it doesn’t seem like it from some of the comments that Proton (the company) has made, where they are basically saying that “Trump/the Republicans is the great hero against Big Tech that we needed”
shirasho@feddit.online 1 day ago
Show me a CEO who isn’t pro-GOP. If you protest every company that has a GOP CEO, you would have to live an Amish lifestyle. It is a fine enough reason to avoid a company, but that in itself does not make their services bad.
Not having all your eggs in one basket is a personal choice, not an objective reason why the company itself or their services are bad. I will acknowledge that if things go sour, it would be a huge PITA to migrate to another service.
Not offering services you need does not make the company bad, though it is a valid reason to seek an alternative that fits your needs. Proton has been working on Linux clients (with ProtonVPN being their latest offering). They will get there one day, I’m sure.
I do agree that Proton Bridge is not the best solution, but it is a solution. I also agree that some solutions aren’t worth the effort or pain, so if Proton Bridge does not work for you, then that is a valid reason to seek something else.
I appreciate you taking the time to actually reply back with your grievances. While it may not appear so in my post, it did give me something to think about.
sbeak@sopuli.xyz 1 day ago
Well, there are plenty of email services that are not super pro-GOP and pro-Trump. Yes, it is ideal to avoid big corporations, but in many cases you simply don’t have an option (see computers, printers, etc.)
I’d rather not give them my money though, and I’d rather not use their services if given alternatives
You keep repeating that their services are not bad, but I don’t think that is true. Everything being tied to one account has an objective downside. The requirement of Proton Bridge for IMAP support is a downside. The lack of a Linux client for Proton Drive is a clear downside for it.
pmk@piefed.ca 1 day ago
How do you feel about Gail Slater?
sbeak@sopuli.xyz 1 day ago
Well I’m not American, so I have no idea who that is. Just skimming Wikipedia, looks like she served as the Assistant Attorney General of the antitrust division during the second Trump admin, but resigned earlier this year. Dunno anything about her though, so can’t place any assumptions.
WhyJiffie@sh.itjust.works 1 day ago
Personally I don’t like how they do marketing, it feels scammy. the naming, calling “unlimited” something that isnt, highlighting the more expensive option, playing with text sizes to make the lower number that is less truthful larger, the alwaus visible banner with distracting background color that advertises some timed discount. also the newsletters, I mean in my mailbox its fine, but when I register someone on protonmail, go out of my way to disable the promotional emails, and later they are automatically subscribed to them for new proton products… what do I say with straight face if someone asks me about any of these?
Ghoelian@piefed.social 1 day ago
I won’t comment on the Proton thing as the other replies already explained it well.
IMAP does not make it more secure, it makes it so that you can use any email client and aren’t tied in to their proprietary apps, like you are with Proton. You either need their desktop app or their bridge.
IMAP having weak security is not an issue (also I’m not aware that it has, you can use imap with plenty of authentication options), because all of your emails are encrypted if you set it up correctly. Someone could steal my every single transaction with mailbox.org and not be able to do anything with the data.
Grail@multiverse.soulism.net 1 day ago
Proton supports Trump
WhyJiffie@sh.itjust.works 1 day ago
how do you use that on an email client on ypur phone?
why is that such a big issue when everything is transferred over an encrypted connection? sure, not optimal, but email providers don’t want to adopt more modern standards for some reason.