Encrypted Email Service Providers

Discussion in 'Email Discussions' started by popowich, Jun 4, 2015.

  1. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    The new page for Encrypted Email Service Providers is ready.

    I started with the comparison page from SCRYPTmail and plan on adding more services (in alphabetical order) and helping to make quick updates as they are received.

    The look of the page will likely change a bit soon when I figure out a better way to manage it's contents.

    Please reply to this discussion if you have a service that would you like added, or any updates & corrections to the existing list of features.
     


    foggy likes this.
  2. Rockman

    Rockman Valued Member

    Joined:
    May 20, 2015
    Messages:
    49
    Likes Received:
    12
    This is a great idea, thanks,

    There are some typos to correct and asterisks to define, among other feature comparison updates with the three you current show on the page.
     

    popowich likes this.
  3. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    Hi Rockman,

    Can you help start sending me the specific corrections and/or suggestions for the features that make sense to move up the list?

    Anything that comes in as a specific "diff" here for me to update vs. a full list of features or posted elsewhere for me to figure out will get fixed faster.

    I'll make a push to get a lot of this done over the next 24 hours.

    The first couple service additions that come to mind are LuxSci and Hushmail since I'm already familiar with them.

    Any other suggestions for services that should get listed but might not have a representative here yet?
    :thanks:
     
  4. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
  5. SCRYPTmail

    SCRYPTmail Email Service Provider

    Joined:
    May 6, 2015
    Messages:
    148
    Likes Received:
    32
  6. Rockman

    Rockman Valued Member

    Joined:
    May 20, 2015
    Messages:
    49
    Likes Received:
    12
    I agree. I think Whiteout Mail is on the right path, in particular with PGP interoperability and key management.
     
  7. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    I reordered the list trying to get everything related to security, encryption, privacy to the top followed by the (still important) usability features.

    The thinking there is that most of the services are not focusing on lots of bells and whistles but providing a secure and stable user experience.

    I added Whiteout Mail with Hushmail and LuxSci.

    Are custom labels and folders the same thing?

    I'll link the asterisks back to replies in this thread or dedicated forum discussions as they appear ;)

    Should Blacklist be dropped since it's a standard feature of Spam filtering that has it's own row?

    I'm using the semi-circle as my question mark. If you see that it means I need more info or help running down the correct answer.
     
  8. SCRYPTmail

    SCRYPTmail Email Service Provider

    Joined:
    May 6, 2015
    Messages:
    148
    Likes Received:
    32
    Yes, I think for most people labels and folders are the same, and blacklist is spam.

    Ps. SSL labs Grade, SCRYPTmail is A+ and I think tutanota too. Encrypted metadata would be incorrect to put check mark for protonmail, tutanota. They encrypt/store encrypted only subject. but recipient, sender, time received, etc are not
     
  9. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    I deleted the two rows mentioned above.

    Thank you LuxSci chat (Zach) for quickly confirming as much of the list as they could real time.

    I redid the SSL test for all sites a couple hours ago and SCRYPTmail was the only A+

    The tests change frequently enough, and there have been a variety of SSL related vulnerabilities over the past few months, so it doesn't surprise me a site may have dropped from A+ to A or worse.
     
  10. Rockman

    Rockman Valued Member

    Joined:
    May 20, 2015
    Messages:
    49
    Likes Received:
    12
    Your table has no legend. What does the half-moon signify?
     
  11. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    The half moon was my "?" while I was working on it. I agree it makes it cluttered.

    I'm blanking them out so they're empty spaces that need more information.
     
  12. SCRYPTmail

    SCRYPTmail Email Service Provider

    Joined:
    May 6, 2015
    Messages:
    148
    Likes Received:
    32
    Yeah it was I meant, A+. We holding highest grade for SSL labs for quite some time already :) In table however it shows only as A
     
  13. Rockman

    Rockman Valued Member

    Joined:
    May 20, 2015
    Messages:
    49
    Likes Received:
    12
    Although OpenPGP can be implemented outside of the services using tools such as Mailvelope, I think native OpenPGP support should be an important feature to track near the top. This one probably needs an asterisk or footnote for details. ;)
     
  14. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    All set!

    Fixed, sort of. The free text does not support a trailing plus sign. :hammer:

    Also, the plugin I'm using says they'll check into that, and making it mobile friendly is coming soon.

    I might need to change the style though since this doesn't seem very responsive.
     
  15. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    It will go 1280 wide now if your screen supports it. That's seems good enough for the moment and doesn't break smaller PC resolutions.
     
  16. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    Encrypt.to suggested we add lavaboom.com to the page.
     
  17. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    Add the Company HQ and location of servers too. Even if it shouldn't matter as much for encrypted mailboxes, people care.
     
  18. ProtonMail

    ProtonMail Email Service Provider

    Joined:
    Jun 13, 2015
    Messages:
    2
    Likes Received:
    0
    Hi this is ProtonMail here, we just want to provide a couple clarifications as we noticed some inaccurate information about our secure email service. Feel free to contact us at support@protonmail.ch for more information on any of the items below.

    -We also have an A+ at SSL labs
    -Our storage systems feature AES256 disk encryption.
    -We also have encrypted attachments as of version 1.16
    -Contacts are also encrypted
    -512 bit private key? what is that? We don't have that as we don't use any 512 bit keys.
    -We allow regenerating RSA keys
    -We are also fully compatible with OpenPGP
    -We also follow the PGP standard
    -Our front end code is audited, see here: ProtonMail Open Source Crytography - ProtonMail Blog
    -Our back end is also audited, see here: ProtonMail Security Contributors - ProtonMail Blog
    -We also conform fully with Do Not Track as defined by EU rules.
    -We also have secure reply as of version 1.15
    -We also have session expiration, it is set to 12 hours.
    -We also have custom folders/labels as of version 1.16

    -Company HQ and servers are all located in Switzerland, fully under Swiss jurisdiction.
     
  19. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
  20. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    9,001
    Likes Received:
    120
    Where did "PGP Standard" originate from? Was this used to mean the system supports PGP encrypted emails between users on the same system, but not sending/receiving encrypted emails to/from other email services?
     

Want to reply or ask your own question?

It only takes a minute to sign up (and it's free!). Click the orange sign up button to choose a username and then you can ask your own questions on the forum.
Loading...