email privacy thread

>>58288963
I did a lot of research a few weeks ago.

TL;DR: it does not matter as long as you don't use the one's which are known to sell your data. (Gmail, Microsoft, etc).

Their FaQ doesn't state anything about DKIM/SPF/DMARC/etc for your own domain, so it was a no-go for me.

I want to use a personal domain so I can easily move mail host later without having to change my email address everywhere.

>>58288963
use whatever you want and PGP encrypt your messages

> openmailbox
- Registrations were closed last time I checked (week(s) ago)

> protonmail
> tutanota
- No IMAP/SMTP to easily get your mails away from their service if ever necessary. Protonmail is working on a solution for this, but their support is very vague about it. Tutanota has an Outlook plugin, but if you care about privacy you wouldn't trust Microsoft.

> posteo
+ They seem very strict, which is good.
- Downside is that they don't allow custom domains due to German laws requiring them to store more customer details if you use a custom domain.

> Kolab
+ Lots of open source stuff, which is great if you care about that.
- Haven't tried them (yet) and not much reviews available.

> Startmail
- Based in the Netherlands. Some days the ministry seems to care a lot about privacy, other days they throw it all out of the window.
- Same company as ixquick/startpage. A popular suggestion is to split your data, so use for example DDG isntead of ixquick/startpage if you use startmail so not one company has al your information.

> Fastmail
+ Currently testing this, web UI is great, I prefer it above Gmail's.
+ Mail and calendars sync works well with my phone (K9 + davdroid)
+ Custom domain support is good, though their default DNS anti spam settings (e.g. DKIM/SPF) could be better. Easily fixed by changing some DNS options.
- Their privacy agreement looks OK, but they are hosted in the US. Though if three letter agencies are in your threat model you are probably fucked anyway.
- Contributing to some open source projects as well.

I might switch to protonmail if they allow IMAP.
Though I am not sure if I trust the javascript based encryption stuff (protonmail/tutanota). It seems like snake oil because it doesn't fix much if any threat models.

Recently Lavabit announced they are coming back, but not much is known about that. That could be another option.

>>58291647
This is probably the only option if you really want privacy. Though I would recommend moving away from companies like Google which entire profit model is based around selling your information. Even if you use PGP/GPG they still have metadata.

>>58288963
been using protonmail paid for about a year
>>58291640
you can use your own domain
>>58291948
>Protonmail is working on a solution for this
they're actually testing it now and just started open beta tests