What do you folks use instead of Proton and Google? Ideally I’m looking for:
- Non-profit.
- European-based if possible.
- Paid is fine.
- Low-risk. E.g. unlikely to disappear, unlikely to go bankrupt.
My reason to want non-profit is that it’s the best way to align mine and the provider’s incentives, I think. I’d consider for-profit as well, but it’s best if it’s a non-profit.
So far I like disroot a lot. But they are principled about being unpaid, so if the financial ends don’t meet each other my emails will be in trouble. I’m donating to them, but I have my worries. I’m willing to pay a little if I know that my money will go for a quality service, for expansion of coverage (new users) and for open-source technologies.
Proton and their founder Andy are just a piece of sh*t in terms of upper management, so that’s not worth discussing.
Posteo seems adequate. Tuta feels similar to Posteo with a bit more push for fanciness. Is there something similar but non-profit?
You are welcome. But I have never heard about “inbound PGP encryption”. Does that mean they would encrypt inbound emails with your key? Email is inherently unsecure communication (unless encrypted before sending), so I wonder how much security/privacy does that actually provide.
Yes.
Indeed, the effect of this is limited. If the system is running properly, all new incoming emails are immediately encrypted - never even stored unencrypted on the disk. Which means that, if an attacker compromises the server, they would not see the body of past emails. They would, however, be able to intercept new raw incoming emails. Another aspect of this functionality is that it’d be near-impossible for posteo to do the evil thing and actually store the incoming messages without incriminating themselves badly if it’s ever found out. That additional aspect is a political pressure for them to do their job very well.
In total, the email architecture is badly broken anyway, but features like that help a little bit.