• 1 Post
  • 45 Comments
Joined 2 years ago
cake
Cake day: June 16th, 2023

help-circle
  • Well, tuta encrypts at rest as well, meaning the data is encrypted in their storage even when the emails sent and received are not using their secure/confidential encryption.

    Realistically, any secure email system with encryption is going to require extra steps by the recipient. Having them click a link and enter a password isn’t that cumbersome in my opinion (versus dealing with pgp keys and such)


  • eramseth@lemmy.worldtoPrivacy@lemmy.mlTutanota / Mailbox.org?
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    6 days ago

    I have used both. Both are good. Tuta doesn’t support pgp as people said, but I think you’ll find that the amount of people you will interact with that can and want to use pgp encrypted email is slim.

    The way tuta works is you can send and receive regular email. And when you send it encrypted, the recipient gets a regular email that’s says something like"you received a confidential email" (you can edit the text). That person then follows a link in the email and you need to provide them with a password (ideally you provide this password out of band… by text or chat or something… but you can of course just send by regular email).

    After they log in, they are basically on a limited web interface to tuta where they can only exchange emails with you (but they can see every email between the two of you in their "inbox).

    It’s a pretty good system. There is also encrypted calendar and contacts. They have webmail of course and also apps. There’s a dedicated calendar app.

    Mailbox.org is actually more of a full office suite at this point. The web interface isn’t as tight and can be confusing. They can handle your pgp keys or you can do it yourself. You need to decide if you care about trusting someone else with your keys. I actually still have my mailbox.org address because I like the domain. It forwards to my tuta email.

    Oh yeah, tuta also allows you to use any of a number of their domains or you can bring your own (pricing may vary). They also have aliasing and catch-all addresses for custom domains.

    Both are based in Germany for what it’s worth. German privacy laws are pretty strict. For any law enforcement to be granted access to any of your stuff there needs to be a court hearing. They have a warrant canary and transparency report here https://tuta.com/blog/transparency-report .

    Also, because tuta is end to end encrypted, all they can release is encrypted data. There’s is more of an explanation at the bottom of that transparency report post about what can be requested and what data they even have on users. Mailbox.org might have similar policies but I haven’t taken the time to find them.

    One thing I will note is that tuta has HSTS enabled I believe so if you’re behind a corporate firewall that does certificate snooping by way of MITM when you try to access, it won’t connect.













  • In an interview I heard, a party official made it clear than anyone who would like to run for president needs 300 delegates’ worth of support. That’s out of over 4000 delegates. So realistically, if someone else wants to be considered, they need to convince less than 10% of delegates that they’re worth a shot, then tell the party that… like this week.

    It all has to be settled before Aug 7 because Ohio state officials (who happen to be republican) set a deadline prior to the dnc convention (presumably they set this deadline after the convention was scheduled…)

    This is all more or less spelled out in black and white despite the unprecedented scenario.





  • I have found synching to be very useful for making copies of files across devices. I have it setup to mirror photos from my phone, photos from my wife’s phone, and various other things (to-do lists for todo.txt, notes and shopping lists for obsidian… stuff like that) back to my desktop and my NAS. You can set it to do one-way sync (which is more like a backup) or two way sync (where changes anywhere are propagated to everywhere else).

    As others have said, it’s not really a true backup solution, but handy to have immediately accessible copies of what’s on your phone in case of phone loss or damage.

    For photo viewing and sharing, I am more or less pointing the photo sharing app on my NAS to the photos I sync from phone. They all get dropped into an “inbox” when first synced and then can be organized from there.

    You may also want an actual backup solution. There are quite a few and that’s a different topic. The reason I bring it up, though, is that simply mirroring what’s currently on device is not considered a real backup by most people, and for good reason.