?'s about startmail and proton mial

Chat about just about anything else
Post Reply
Frldyz
Level 2
Level 2
Posts: 73
Joined: Wed Jan 31, 2018 11:43 am

?'s about startmail and proton mial

Post by Frldyz » Wed Jul 04, 2018 3:10 pm

I've been reading a lot about how unsecure a lot of free email services are.

I saw a video on youtube about startmail and proton mail.

I've read a lot of good things about them being secure. But I don't quit understand how it works.

My understanding is:
When I send an email it is encrypted with a code. The recipient then receives the email but cannot read it until they un-encrypt it by answering a question or entering a code.

Is that right?

Does it have to work like that?

What if I email a company or a manufactuer of a product and they receive that. they aren;t gonna go thru that hassle. Especially when they don;t know me.
So they will just delete it.
And when I email people I know they will think its spam.
Last edited by xenopeek on Wed Jul 04, 2018 3:44 pm, edited 1 time in total.
Reason: not about Linux Mint so moved here

User avatar
xenopeek
Level 24
Level 24
Posts: 22920
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: ?'s about startmail and proton mial

Post by xenopeek » Wed Jul 04, 2018 4:17 pm

Frldyz wrote:
Wed Jul 04, 2018 3:10 pm
My understanding is:
When I send an email it is encrypted with a code. The recipient then receives the email but cannot read it until they un-encrypt it by answering a question or entering a code.
That's indeed what the StartMail and ProtonMail support pages on this method describe:
- https://support.startmail.com/index.php ... ion-method
- https://protonmail.com/support/knowledg ... ide-users/

As I understand it, it sends an email to the recipient with a link back to the StartMail or ProtonMail website. The person that is supposed to have the link can visit the website with it and will be asked to answer a question or enter code only they are supposed to know, and then can read the decrypted message on the website.

Personally I don't see much value in this. It will for sure confuse the heck out of any of my contacts, and like you say many will see it as spam at best but probably as a phishing attack. If you have the need for encrypted messages, better to both be on StartMail or ProtonMail as that way email is automatically encrypted between (not across these services though!). Or use an encrypted messenger program you both use.

Only ProtonMail is free, right? StartMail offers a trial but eventually you'll have to pay. Aside from the iffy encryption of email to outside recipients, their prices are incredibly steep if you look at what else you get. The account limits on both would be crippling to me. Especially for custom domains, catch-all-addresses and aliases.
Image

User avatar
jimallyn
Level 18
Level 18
Posts: 8455
Joined: Thu Jun 05, 2014 7:34 pm
Location: Wenatchee, WA USA

Re: ?'s about startmail and proton mial

Post by jimallyn » Wed Jul 04, 2018 6:44 pm

I have been reading a lot lately about computer security and privacy for activists, and several times I have seen people recommend against ProtonMail. I don't remember the exact reasons why. What I have seen recommended a lot is using GPG encrypted email, like the Enigmail plugin for the Thunderbird email client. There are a couple of websites that have lots of good information on computer security and privacy, among them:

https://ssd.eff.org/

https://cldc.org/security/

Spend some time wandering around those sites, read some of the articles, and make a decision on what you want to do. I know if you use Enigmail, you can decide for each email whether or not to encrypt it. If you have emails that need to be completely private, encrypt it. (This assumes, of course, that the people you email have the ability to decrypt your emails.) If you are sending email to a company, don't encrypt it.
Image

“If the government were coming for your TVs and cars, then you'd be upset. But, as it is, they're only coming for your sons.” - Daniel Berrigan

KBD47
Level 7
Level 7
Posts: 1620
Joined: Fri Jul 29, 2011 12:03 am

Re: ?'s about startmail and proton mial

Post by KBD47 » Wed Jul 04, 2018 9:54 pm

I have protonmail and tutanota mail, both can send encrypted email that requires a password, but you can disable that and use them like gmail or any other email account.

Frldyz
Level 2
Level 2
Posts: 73
Joined: Wed Jan 31, 2018 11:43 am

Re: ?'s about startmail and proton mial

Post by Frldyz » Fri Jul 06, 2018 2:14 pm

I've heard something about "mail forwarding".
What exactly is that?

Does that mean if I still have an aol email account that I'm currently using and someone sends an email to my aol account. It will automatically be forwarded to my proton mail?

What if I send a mail or reply from my proton mail?
Does it show up to the recipient coming from my aol account?

User avatar
xenopeek
Level 24
Level 24
Posts: 22920
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: ?'s about startmail and proton mial

Post by xenopeek » Sat Jul 07, 2018 1:11 am

Frldyz wrote:
Fri Jul 06, 2018 2:14 pm
Does that mean if I still have an aol email account that I'm currently using and someone sends an email to my aol account. It will automatically be forwarded to my proton mail?
If you configure aol as such, yes.
Frldyz wrote:
Fri Jul 06, 2018 2:14 pm
What if I send a mail or reply from my proton mail?
That depends on whether proton mail gives you the option to send email from other accounts or not.

Personally I'm using FastMail. They have a thorough approach to security https://www.fastmail.com/help/ourservice/security.html. TLS required for all connections to the servers, 2FA for login, no ads / no tracking / "I'm the customer not the product", default blocking of external content like images, content security policy on the website to prevent 3rd party scripts from running, encrypting email in-transit between mail servers, implementing DKIM signing and SPF (also for your own domains) for sender authentication, and of course run the servers with free software. They also actively participate in, and initiate development of, free software and open standards related to email. It's an employee owned company. To be clear; it's a paid email service not offering end-to-end GPG encryption but doing everything else right. Especially if you want to host your own domains with them.

Anyway, with FastMail you can configure up to 50 fetch accounts on your account. So you can retrieve email from up to 50 email accounts with other email services and retrieve them into your FastMail mailbox (delivered into specific folder if you want). You can also send email through those email accounts, using the mail server of the other account.
Image

User avatar
Portreve
Level 6
Level 6
Posts: 1346
Joined: Mon Apr 18, 2011 12:03 am
Location: Florida
Contact:

Re: ?'s about startmail and proton mial

Post by Portreve » Sat Jul 07, 2018 10:13 am

Tutanota lets you send standard email that's not encrypted.

I wish the various different services out there would get their act together and be compatible. This really isn't helping the adoption of encryption for securing emails.
Peoples of the universe, please attend carefully: the message which follows is vital to the future of you all.

Post Reply

Return to “Open chat”