this post was submitted on 10 Jun 2024
66 points (98.5% liked)

Privacy

32173 readers
1086 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I am now using disroot . I don't care about anonymity or anything as I just wanna use it to connect to my bank, ID and buy/book shit etc. Which all have my phone number, address, name etc anyway so no point in that . I just want the security privacy to be good enough that no one can easily hack it, steal my OTP, inbox etc and I want it to be big and trusted enough that they won't sell it/sell it and go Scott free also gmail asks email or phone number for verification and then brick acc if I don't comply so I'd like to skip those kind of ones . Is disroot enough for my uses ? Also I'd like a free one as I barely use emails like 3 or 4 times a year .

all 42 comments
sorted by: hot top controversial new old
[–] [email protected] 19 points 5 months ago (1 children)

If you have your own domain, I recommend Migadu. They take care of all the boring parts of hosting email, while being cheap and very reliable. All you have to do is[1] follow their guude to setup some DNS records and double check everything is right. After that, you have a working email account with unlimited addresses, inboxes and a bunch more nice features.

[1]: Besides getting a domain name, which you should get anyway, since it gives you more control over your digital identity and makes it much easier to migrate providers in the future.

[–] [email protected] 5 points 5 months ago (2 children)

Uh I'm not that tech savy but thanks for the suggestion .

[–] [email protected] 6 points 5 months ago* (last edited 5 months ago)

I understand.
You could look into getting a domain either way, it really is pretty simple — you go to a registrar website (I like porkbun.com), choose your domain name and purchase it. To get the email stuff going, it's just a bit of copy pasting between their guide and the domain's control panel.

Like I said, this domain stuff is useful outside of Migadu and similar services, but for a more 0-config option, I think disroot is alright. You also have a mailbox.org and StartMail (from StartPage).

[–] [email protected] 3 points 5 months ago* (last edited 5 months ago) (1 children)

It's also cheap. Not free but their lowest plan is something like $12/year.

They also let you make unlimited aliases and even wildcard aliases which are great for making up addresses on the fly so you never use the same address with two websites, and fighting spam.

[–] [email protected] 1 points 5 months ago (1 children)

$19 USD/year for micro now, $90USD/year for mini

[–] [email protected] 2 points 5 months ago

Ah cool. It's starts being very competitive very fast if you need more than one mailbox and/or more than one domain. Regular services will ask for something like $5/mo (per domain and per mailbox!) which adds up very quickly.

Wish more services used the "all you can eat" model. Charging for emails sent/received and for storage space is all that's needed. Charging for "mailboxes" or "domains" or "aliases" has always been a scam.

[–] [email protected] 18 points 5 months ago* (last edited 5 months ago) (3 children)

I use mailbox.org personally. Disroot is probably fine. Do they have 2FA? That would be the most essential thing you want here if you're worried about being hacked by an outside party. 2FA would even mitigate a password leak in most cases, since they'd only have 1 of the authentication factors.

If you're worried about hacking, you can do some things to mitigate the damage that would cause. Download important old emails and delete them from the server, this is pretty easy to do in a desktop client (like thunderbird or outlook) where you'd just move them to a local folder. That way if someone gains access, or they sell to someone that processes the data, they won't have the old emails (unless they for some reason retained a separate copy, which seems doubtful).

Sign your email up for https://haveibeenpwned.com/. Then you'll get notifications if there's any data leaks, including of your email provider. Obviously this is only useful if nobody has stolen your account before the leak is reported, but that's more likely than not (unless you're a particularly valuable target for some reason).

[–] [email protected] 5 points 5 months ago* (last edited 5 months ago)

+1 for Mailbox.org Comes with a great feature set and is inexpensive

[–] [email protected] 4 points 5 months ago

Thanks for these I'll try some of these things you mentioned .

[–] [email protected] 4 points 5 months ago

I also use mailbox.org, specifically the 1€/month tier. I'd recommend it.

[–] [email protected] 14 points 5 months ago (1 children)
[–] [email protected] 9 points 5 months ago* (last edited 5 months ago)

Disroot should be fine for that. But what is the problem with Proton? Select protonmail.com and you should have no issues at all (proton.me is sometimes blocked because it is not a .com)

[–] elias_griffin 6 points 5 months ago (1 children)
[–] [email protected] 2 points 5 months ago

This is a great service. Easy, simple, everything just works. If you want a simple no BS email that's like a dollar a month or so they are pretty good. A lot of encryption features and privacy settings. Completely renewable powered. I wish more companies were as Eco friendly as posteo. Worth checking them out.

[–] [email protected] 6 points 5 months ago (2 children)

I've been using Fastmail for a few years and I'm quite happy with the service. Being a semi-large organization I expect their security to be OK, but if anyone has comments on that aspect I welcome them.

As for privacy, I always consider e-mail to be a postcard. If I want to encrypt something, I use GPG locally.

[–] [email protected] 1 points 5 months ago

Another Fastmail user. I’m happy with it. The unlimited alias and masked emails are nice. From what I can tell I’ve only ever gotten emails from things I have directly and explicitly given my info to, so I’m assuming my email address isn’t being sold around resulting in lots of spam.

[–] [email protected] 0 points 5 months ago

Recent convert myself. And now that I've experienced mail, calendar, notes, and file storage all in the same app (android, at least) I can't go back to separate apps.

[–] [email protected] 5 points 5 months ago (1 children)

StartMail, Soverin, Disroot, Infomaniak Kmail, Mailfence, Mailbox.org, Kolab Now And Posteo

[–] [email protected] 3 points 5 months ago (1 children)

Thanks for the list which one would you recommend out of these ?

[–] [email protected] 2 points 5 months ago (1 children)

Maybe kMail(very beautiful) or disroot(more about freedom and not very beautiful). Both open source.

[–] [email protected] 1 points 5 months ago* (last edited 5 months ago)

Or if you have a lot of money - StartMail. It has unlimited aliasing feature and UI is very good.

[–] [email protected] 5 points 5 months ago* (last edited 5 months ago) (2 children)

I use also Murena Mail, apart of Proton https://murena.io Murena is a whole ecosystem, similar to GDrive, they even had launched the complete degoogled Murena smartphones

Tech Radar review

Murena’s key goal is to stop companies collecting unnecessary data from your phone and online footprints, which it says accounts for up to 12Mb every single day. Transparency is clearly important when browsing Murena’s website, which states that all of its servers are based in Europe including its Finnish email and cloud servers, resulting in full GDPR compliance.

Nextcloud, which sets the foundation for many of Murena’s services, is end-to-end encrypted, while a statement on Murena’s website reads:

“We don’t scan your data, we don’t log your app usage, we don’t sell your data, we don’t use ads in our online services.”

Negative points for some

  • Only 1 GB Cloud for free (maybe enough if you only use the mail)
  • Somewhat more expensive than others with the Premium plan
[–] [email protected] 2 points 5 months ago (1 children)

the source code of their services is open?

[–] [email protected] 3 points 5 months ago

Yes, the only thing which until now isn't opensource is Magic Earth, which they use in their /e/OS (degoogled Android) instead of Google maps.

[–] [email protected] 1 points 5 months ago (1 children)

That looks really good . Would you recommend switching from disroot to this ?

[–] [email protected] 1 points 5 months ago

Well, at least for me Murena is a nice and private Mail and OpenSource. If 1 GB is enough for you, it's a good choice. Apart there is no need to switch, it's always advisable to have several mail accounts at hand.

[–] [email protected] 4 points 5 months ago

Gonna suggest a more lowkey one, https://runbox.com/

[–] mojoaar 4 points 5 months ago

Will drop migadu into the pool of sugestions.

[–] [email protected] 3 points 5 months ago* (last edited 5 months ago) (1 children)

Checkout the list of recommendations published by the Free Software Foundation: https://www.fsf.org/resources/webmail-systems

[–] [email protected] 2 points 5 months ago (1 children)

Why do they hate JS so much? Haven't they used the modern internet?

[–] [email protected] 1 points 5 months ago

Because proprietary JS is non-free software and they are against running non-free software.

[–] [email protected] 3 points 5 months ago

Purelymail.com

[–] [email protected] 2 points 5 months ago (2 children)

I believe cocks.li is still open, so you could use them. You said in another reply that you're not savvy enough for your own domain, but if you change your mind, purelymail.com With your own domain, you can easily switch providers without losing access to your addresses.

[–] [email protected] 6 points 5 months ago (1 children)

I'm pretty sure it's cock.li instead of cock~~s~~.li

[–] [email protected] 2 points 5 months ago

Yup, thanks for the correction

[–] [email protected] 4 points 5 months ago (2 children)

dont use cocks.li lol, it has a bad reputation

[–] [email protected] 1 points 5 months ago (1 children)

For what reason? Just curious. Don't use them for anything critical.

[–] [email protected] 1 points 5 months ago

they are known for being used for bomb threats or 4chan weirdos. but yeah i wouldn't use them for anything serious. you dont wanna have to say THAT email address over the phone to customer support of your bank or something lol.

[–] InternetCitizen2 1 points 5 months ago (1 children)
[–] [email protected] 2 points 5 months ago