This guy can be pretty harsh at times, but he’s clearly very knowledgeable..
However, not all providers have a recent review, and his priorities are skewed heavily to the “paranoid” side of the tech world. For example, he considers being able to mail cash to a provider a significant pro. The overwhelming majority of users aren’t mailing cash to pay for their email.
Overall, it’s good info that’s worth sharing.
Seems a bit nearsighted to accuse every service of malice and then completely ignore that tutanota fixes lackluster pgp encryption by also encrypting the subject line.
further read
Not sure if this is entirely true, it is possible Proton mail is encrypting everything at rest (with the users public key) and only following PGP mail limitations during transit.
Cool, thank you for clearing that up!
I do like Tutanota’s approach to encryption, but communication outside of other Tutanota addresses is less secure than PGP. It’s just a symmetric, password-based scheme.
Since you will probably deal with a lot of non-tuta email providers, it’s a hard sell for me. In network, though, it’s good.
Second issue I had with it was the email client. I like my third party client and it’s built into my workflow. Tuta doesn’t support third party clients because they consider the storage of emails on your local drive a security risk. (That’s only true if your hard drive isn’t encrypted, and setting up encryption isn’t all that hard to do)