Email security help?

eminem93

New Member
Hi guys,

I'm not the greatest IT type so I need some assistance. I'm looking to create a completely anonymous online email account. However, everything it seems you have to pay for. I used to have a safe-mail but it appears they are down and out now, plus I stopped using my safe-mail like a yeaer ago anyways. I want to use protonmail but they are booked out at the moment and only let you join via donation.

Does anyone know of any email service providers that are free, based outside of the US, are heavy on encryption / PGP and will not ask for a payment?


Thanks,

Marshall Mathers
 
Look into tutanota , I have protonmail but I've seen people mention the tut. You can still request proton ,might take a few weeks though
 
Hi guys,

I'm not the greatest IT type so I need some assistance. I'm looking to create a completely anonymous online email account. However, everything it seems you have to pay for. I used to have a safe-mail but it appears they are down and out now, plus I stopped using my safe-mail like a yeaer ago anyways. I want to use protonmail but they are booked out at the moment and only let you join via donation.

Does anyone know of any email service providers that are free, based outside of the US, are heavy on encryption / PGP and will not ask for a payment?


Thanks,

Marshall Mathers
"Which" email service provider you choose - whether it's Tutanota or Protonmail - isn't necessarily going to help you with anonymity. It's the "how" you set up and use your account that is important too.

See this: https://thinksteroids.com/community...t-up-a-new-anonymous-email-account.134370097/
 
Most, if not all, email service providers will cooperate with the U.S. government IF it obtains a court order in the country in which the service provider is based. Hushmail will. Google will. Safe-mail will. Protonmail will. Tutanota will.

Here's the thing with hushmail... Hushmail (as does google, yahoo, hotmail) will turn over all UNENCRYPTED plain text communications to the feds.

Protonmail and Tutanota will still turn over the info to the U.S. government IF it obtains a court order in Switerland and Germany, respectively. But the important difference is that they are a ZERO KNOWLEDGE service provider. IOW, they do not (at least they claim they don't) have access to your unencrypted emails. So, even if they are forced to turn over info, your data is encrypted.

With Hushmail, it is not. The same is likely true of Safe-Mail since they have refused to deny they can unencrypt customer emails.

Protonmail and Tutanota are open source too. I think this means their claims can be evaluated and exposed if false. And they have a warrant canary to transparently disclose any requests that they receive and grant.
 
Most, if not all, email service providers will cooperate with the U.S. government IF it obtains a court order in the country in which the service provider is based. Hushmail will. Google will. Safe-mail will. Protonmail will. Tutanota will.

Here's the thing with hushmail... Hushmail (as does google, yahoo, hotmail) will turn over all UNENCRYPTED plain text communications to the feds.

Protonmail and Tutanota will still turn over the info to the U.S. government IF it obtains a court order in Switerland and Germany, respectively. But the important difference is that they are a ZERO KNOWLEDGE service provider. IOW, they do not (at least they claim they don't) have access to your unencrypted emails. So, even if they are forced to turn over info, your data is encrypted.

With Hushmail, it is not. The same is likely true of Safe-Mail since they have refused to deny they can unencrypt customer emails.

Protonmail and Tutanota are open source too. I think this means their claims can be evaluated and exposed if false. And if they have a warrant canary to transparently disclose any requests that they receive and grant.



Countermail is located in Sweden ... these guys protected thepiratebay I think Countermail is ok for the moment :)
 
Countermail is located in Sweden ... these guys protected thepiratebay I think Countermail is ok for the moment :)
Sweden's ridiculous anti-steroid policies always make me a little anxious when it comes to its (selective?) defense/enforcement of privacy principles although it shouldn't make a difference.

The main criticism I've seen of Countermail is it's reliance on java applet. Java has long been criticized for its many security holes and failures but Countermail has published a defense of its Java use (I can't find the link immediately).

As far as my personal wishlist for an email provider is concerned, I'd like to see more transparency in the form of a warrant canary. Plus, as a premium pay service, I'd like to see it offer Bitcoin as a payment option.
 
To be fair to Countermail, services like Protonmail (and probably Tutanota) aren't fully secure for related reasons. With Countermail and java, you have to worry about downloading a java applet every time. With Protonmail, you are downloading new javascript with every page load to secure your messages. Java vulnerability is far worse but the javacript vulnerability is bad too. You must trust protonmail never to deliver malicious code. But what if...

What if the U.S. government obtained a Swiss court order requiring Protonmail to selectively deliver a malicious javascript code to a particular user as the target of the court order?

This isn’t ProtonMail’s only weakness. It could also serve malicious code to a targeted individual (based on a specific IP address, for example) if legally compelled to do so. “You have to completely trust that the server is not compromised because every single time you load the page, you download a new copy of the JavaScript,” Lee says. “They could just wait until you load the page and give you a malicious version of the JavaScript. This would be much more difficult to do if it was a browser add-on or a native program you install because then if they wanted to make their client malicious, they would have to add a backdoor and make it malicious for everyone, and everybody would have evidence of that backdoor.”

The solutions would be a mobile app (in beta testing by Protonmail) or a browser add-in.

Source: http://www.wired.com/2015/10/mr-robot-uses-protonmail-still-isnt-fully-secure/
 
As far as the German-based Tutanota is concerned. Here's something I came across that bears further looking into:

"Germany has notoriously strong data protection laws—likely the strongest in the world. But those laws do have law enforcement exceptions for security agencies, like the BND, Germany’s equivalent to the National Security Agency. The BND likely can easily access e-mails stored unencrypted on German servers with little legal or technical interference."

Source: http://arstechnica.com/business/201...n-e-mail-providers-secure-data-storage-claim/
 
I guess if u have a email provider that can keep all emails encrypted your some what safe

Still won't matter it would just slow down the process until the can unencrypted
I have one that can give your emails out with a court order but they won't unencrypted
Anything beats google gmail
 
Back
Top