logoalt Hacker News

seanw444 • yesterday at 7:11 PM • 1 reply • view on HN

I really like the idea of using Fastmail over Tuta since they support normal protocols and thus third party clients. My main concern is that if they're able to serve those protocols, they have to be able to access my emails in plaintext in some form or fashion, which also means if their systems do (and most likely inevitably will these days) get hacked at some point, all my emails are now exposed and leaked.


Replies

grey-area • yesterday at 8:07 PM

Yes email is inherently insecure, don't forget your emails also sit on lots of other systems too usually unencrypted unless everyone else has opsec matching yours. Don't put important secrets in email I guess.

Frustrating that it was designed so badly and I don't think there's a way to fix it without fixing protocols really and doing E2E encryption and signing with keys only on devices, even then you depend on all the code handling that to be secure, and nobody on the other side to store plain text of your encrypted emails (which they must be able to see/get after all).