57
"Trusted" eMail Providers? (lemmy.zip)
submitted 5 months ago by to c/privacy@lemmy.ml
70 comments fedilink hide all child comments
 

I switched from Gmail to Proton, but now with everything coming out about Proton I'm switching from them too. I started using Posteo which I like but a lot of my accounts having to do with money and finance (including my bank) aren't accepting the Posteo email. They have rejected it over and over and even locked me out stating that I was hacked.

Do you guys have any recommendations for email providers to use that also won't send red flags to my more official accounts?

If it helps, I'm US-based.

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 4 months ago* (8 children)

Proton uses privacy as a selling point and they deliver on it by providing you with a private email service.

If you would like to assert that they’ve broken some kind of promise they made to you in regards to privacy, then yes, you have to provide some sort of proof of that claim. If you believe that you don’t, it’s you that appears impossibly dumb I fear.

If you have a point to make about their marketing practices, then make it. If you can’t articulate a single problem you have with Proton then you’re just yapping and can be safely ignored.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] -1 points 4 months ago* (7 children)

    I am glad you admit to at least one basic fact. I don't like how they market to privacy when they do shit like store your credit card meta data on their server.

    Other companies have solved this privacy problem but yet this supposed privacy company can't seem to figure out. I personally believe that because of their marketing they have created quite the honeypot for illicit actors. They know this and they are a little too eager to give up information because of it.

    They receive ten of thousands of requests for information every year and this keeps increasing dramatically. They have already transitioned from famous to infamous for the amount of times they have failed their users.

    Everytime the excuse is the same. It is the end users fault for not buying our VPN or some other bullshit. The are shitty and you seem to tow the company line like a good little shill.

    As I said before, I still believe you might be operating an elaborate parody account. I really can't believe people are this hard core, it reminds of those defenders of Microsoft or Telsa in years prior.

    Security theatre is just that. Proton is just cashing in on the concept of security when they are aware that their own practices along with the industry at large prevents it.

    https://cambridgeanalytica.org/news/protonmail-s-logging-trap-how-privacy-theater-enables-the-post-cambridge-analytica-surveillance-state-50339/

    You want to throw money at them to ignore the actual problem at hand, go ahead. Pretending they actually offer security is a lie. It is a marketing lie. Security is not achieved by giving your hard earned money to a corporation and frankly you should be ashamed for suggesting it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 1 point 4 months ago* (last edited 4 months ago) (6 children)

    I don't like how they market to privacy when they do shit like store your credit card meta data on their server.

    Did they market to not storing metadata? Of course not, they can’t lol. Neither can any of the other privacy focus email providers lol.

    Other companies have solved this privacy problem

    Have they though? Do you have any proof of this? If they’re taking credit card information, they are required to keep the same metadata. Not doing so would stop them from being able to process credit cards at all. You don’t know the first thing about the payment industry clearly lol.

    They have already transitioned from famous to infamous for the amount of times they have failed their users

    They have not. I can’t find one verifiable instance where they failed their users.

    Security theatre is just that. Proton is just cashing in on the concept of security when they are aware that their own practices along with the industry at large prevents it.

    They deliver on privacy and security in every way they feasibly can, and in fact all the ways they advertise. Do you have any proof to the contrary? You still have provided none.

    Are you at any point going to provide an example of this so-called security theater, or any way that they’ve broken any promises, or failed their users? Or are you just going to keep yapping in a circle about nothing without providing any proof?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] -1 points 4 months ago* (last edited 4 months ago) (5 children)

    They market on privacy and fail to deliver as I keep pointing out. Perhaps this isn't entirely their fault because of regulations and the way the Internet industry operates. I recognize this, but this informs me to be skeptical of all corporations. Self hosting is also problematic because the big providers are essentially using their monopoly power to lock residential IP addressed email out.

    As far as the meta credit card data, yes they do keep it.

    "We do not retain full credit card details, we only save your name and the last 4 digits of the credit card number. " -Proton

    I am not a fan of any corporation, but to illustrate a point Mullvad VPN does not store this information on their servers at all. There is some nuance with Swiss law where VPN provider can't be compelled to hand over logs but email providers can be compelled if the user or provider chooses to use or turn on a logging feature. I don't speak their language(s) so I could be misreading these details.

    "It is therefore our policy to never store any activity logs or metadata and to have as minimal data retention as possible. " -Mullvad

    Having this separation is just another layer of privacy that illustrates that a company that is focused on privacy can continue to innovate to increase protection. If you are going to pay for privacy, you should expect excellence. Not exactly what state law allows. That is the floor not the ceiling.

    Proton is low effort and that has resulted in governments abusing their power to out protestors/criminals/etc. There are multiple cases of this happening which has also forced Proton to become an arbitrator of investigations.

    You see, they do fight back for some users but not all. This obviously creates an enormous conflict of interest because a private corporation should not be the arbitrator of the law in this way.

    Needless to say the bigger a corporation grows the more concerning this becomes. A market with a few dominate providers allows for abuses and Proton is unfortunately part of the problem at this point. I suppose their is some lesser of the evils argument for using their service that I don't care to entertain.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 0 points 4 months ago* (4 children)

    They market on privacy and fail to deliver as I keep pointing out.

    You haven’t pointed out a single way they’ve failed to deliver. They deliver on all of their marketing promises, and I have yet to see any proof to the contrary. You saying they failed over and over again is not proof.

    "We do not retain full credit card details, we only save your name and the last 4 digits of the credit card number. " -Proton

    So Proton is keeping only the bare minimum amount of information necessary? Sounds like something a company keen on privacy would do lol.

    I am not a fan of any corporation, but to illustrate a point Mullvad VPN does not store this information on their servers at all.

    Mullvad is a VPN service, they don’t provide private email services like Proton. Mullvad doesn’t need to keep any metadata because you’re not paying them to maintain or store your data. It is a transit system for your data, not a destination. You’re comparing apples and oranges.

    The actual comparison you’d have to make is with other private email providers like Tutanota or Fastmail, both of which store the same payment metadata as ProtonMail, because they have to.

    If you are going to pay for privacy, you should expect excellence. Not exactly what state law allows.

    When I pay for privacy, I expect to receive privacy, and preferably the most privacy, and that’s what ProtonMail delivers quite successfully. Moreso than its competitors in fact, because I also understand that paying for a commercial service means that service is subject to the laws where the service resides, and Tutanota is in Germany, and Fastmail is in Australia/US.

    Have you found any proof for your claims yet? You’ve had plenty of time now. If you can’t provide anything with your next comment I’ll be forced to determine that you just don’t have any, and that your only aim was to spread misinformation from the start.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 0 points 4 months ago* (last edited 4 months ago) (3 children)

    I have already explained to you several times what my issue with Proton is. If you are incapable of understanding that is okay.

    You don't understand how payment is processed and no a VPN does not have to process their payment differently. There is no requirement to hold onto meta data. Once again you are failing to grasp. I believe you are just acting obtuse at this point.

    You are just a fanboy who licks the boots of the business they pay for.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 4 months ago* (2 children)

    You’ve failed to explain yourself properly or make any coherent point or provide any evidence of your baseless claims.

    You clearly don’t understand how payment processing works, but since I do I will tell you that yes, there’s a big difference between an ephemeral VPN service that doesn’t need to tie any long term data to your account, and an email service that has to secure and maintain your data for you over a long period of time. These are two wildly different service models and There is in fact a requirement to hold onto payment data in this case. This is why all of Protons competitors do the same thing.

    Your technological ignorance and naïveté to the world is not an indictment of Proton. And since you still after all of this time haven’t make a single coherent argument against proton or provided any proof to any of your claims, I’ll have to call it here.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •