Hosting your own mail server. But unless you're really certain you want to do that, and are very clear on what you need to do to keep your setup secure and your mails out of spam, don't. It's not impossible, but probably not worth the effort.

I am personally probably going to switch to mailbox.org when my Proton contract is up, already using it with an org I sysadmin for, and all in all pretty happy. Of course no guarantees that they don't enshitify, and they recently raised prices, but they're a lot less publicity/marketing focused compared to Proton. Less silicon valley energy, if you get me.

I am also setting up my own Mailserver with a throwaway domain to test the waters, but I'm not expecting to use that for anything serious in the near future.

  • source
  • parent
  • context
  • [–] 31 points 1 week ago* (6 children)

    Tuta, funnily enough, makes it very hard to send encrypted mail to people who aren't also using tuta. Maybe also look at Mailbox.org and Posteo. They have a lot less marketing/hype/fearmongering compared to tuta and Proton, but have similar features regarding encryption and security, with less walled-garden like restrictions.

  • source
  • parent
  • context
  • [–] 10 points 1 week ago* (last edited 1 week ago)

    Yes, but that would make this make even less sense. The US sometimes uses liberal as a stand in for left-leaning. The more common definition is against regulation, so sometimes socially liberal, but also, and more importantly market liberal (think Argentina's president for an extreme example). So this is very us liberal coded, just with goals far exceeding what most us "liberal" politicians currently try to achieve.

  • source
  • parent
  • context
  • [–] 2 points 1 week ago* (1 child)

    Too many services don't allow multiple passkeys per account. If they are supposed to be device level attestation, you need to be able to enroll one per device. I know that there are some frameworks to connect an enrolled device to attest, but that a) plain doesn't work well for some configs, and b) is annoying. I understand having a hardware security key for some stuff, but I feel like having that be a random ass phone for most people isn't really that desirable.

    I feel like syncable passkeys are a band aid on top of most services having no idea how to implement passkeys well.

  • source
  • parent
  • context
  • view more: next ›