• Cyborganism@lemmy.ca
    link
    fedilink
    arrow-up
    2
    ·
    11 hours ago

    Please explain to me how Fastmail is more secure if you can easily set up any client without encryption? Or am I missing something? And when Fastmail sends or receives email, isn’t it also sent in plain text because of the SMTP protocol anyway?

    • PlexSheep@infosec.pub
      link
      fedilink
      arrow-up
      1
      ·
      10 hours ago

      IMAP and SMTP, the protocols mainly used for emails besides whatever weird shit Microsoft is doing, nowadays all have variants going through a TLS encrypted session like HTTPS.

      That doesn’t change the fact that email is not up to the task of modern secure communication (TLS is not end to end encryption for example, and smime and pgp are super user unfriendly and have their own weirdnesses), but makes it better at least.

    • setVeryLoud(true);@lemmy.ca
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      10 hours ago

      It’s not. Proton’s “security” is basically pointless and induces a huge hassle if you’d like to use anything else than the web client.

      As you said, both Proton and any other mail client send mail in plain text over SMTP unless encrypted using PGP/GPG (or conversing with another Proton user in the case of Proton Mail).

      Fastmail is just a much nicer email provider IMO, and I can consume emails / calendar / files using third party clients. There’s also Tuta and other mail providers, I’m just warning you to maybe steer clear of Proton unless you intend to use Proton-specific features, as usability greatly suffers.

      Ideally, I’d pick an email provider with data sovereignty in Canada, but short of self-hosting (which isn’t a great idea with email), there are basically no decent options.

      • Cyborganism@lemmy.ca
        link
        fedilink
        arrow-up
        1
        ·
        10 hours ago

        I’m already migrating all my shit to Proton and it’s fine for me, so I won’t change providers again unless something really bad happens.

        Also, data sovereignty in Canada isn’t much better than in the U.S. I’d rather have my stuff stored in a place with better privacy rights than Canada.