Ask Lemmy

The CEO of Proton recently came out as a right wing partisan who supports American neofascism. I would look elsewhere for email providers, Proton is not as trustworthy as they purport to be.

Buy a domain name and put that on the service provider of your choice.

Tuta - https://tuta.com/

(Formerly known as Tutanota)

Bring your own domain.

You don't want to be locked in to one mail provider for life. Just bring your domain when you leave.

I've had mine since 2010. First on Gmail, then proton and now purelymail. Gmail is evil. Proton is pricy, and more so if you have several domains. Purelymail is very affordable in comparison.

As always, I recommend Posteo. It's cheap (1€/mo), allows third party apps and at least their website doesn't have any trackers or ads. Probably the best paid one out there.

Personally I've heard very good things about mailbox.org

It can be paid anonymously, if you want. There is no (real) free option, and you didn't mention if you were only looking at those, but your examples are mostly free.

So when it comes to encryption for digital data there are really two concerns:

1. encrypted at rest
2. encrypted in transit

Your options for encrypted email providers are limited:

• https://www.privacyguides.org/en/email/
• https://en.wikipedia.org/wiki/Comparison_of_webmail_providers#Features

and Protonmail seems incorrect for this because it largely wouldn't be encrypted mail.

I'm curious why you think so?

Proton's inboxes are encrypted, so that's (1) handled.

For (2), Proton-to-Proton emails are automatically encrypted. Proton-to-WKD-enabled-services are also automatically encrypted:

Proton also supports automatic external key discovery with Web Key Directory (WKD). This means that emails sent to other providers which use WKD will be automatically encrypted with OpenPGP as well, without the need to manually exchange public PGP keys with your contacts.

And finally, emails to non-secure services can be encrypted, but you must provide the decryption password to the receiver through some other method. These emails can also be configured to automatically delete after a set expiration time.

This is the most feature-complete encrypted email service that I'm aware of, it basically covers all cases that it is possible for Proton to cover on their own service, anything more would require cooperation from the other service(s). No email service could possibly force an inbound email to be encrypted in transit, the sending service has to do that, and that's really the only part that Proton doesn't have a feature for (because it's impossible). If encryption is your concern, I don't think there are any better options right now.

I use Tuta for multiple domains and it's been an amazing experience so far.

cock.li

If you want a standards-based service without bullshit and with custom domain support, I can recommend Purelymail.

I use mailbox.org with my own domains. And I encrypt my inbox using a PGP key I manage myself.

My setup is pretty much the same what Proton gives out of the box, I just manage my own keys rather than replying on the company.

Yes, my provider can see my unencrypted mails before my key encrypts it, but I trust them enough and I don't pass sensitive information using emails.

I'm happy with Fastmail. Making masked emails is great to me, and you can bring your own domain with you. It also is integrated with 1password.

Namecrane is hella cheap for lifetime rnow 70$ 250gb storage 15 sites, or 10$ a year reocurring 100gb storage 15 sites (I have this one), fast and easy to setup.