I have compiled my official mail provider recommendations. With any provider, you must always use your own domain.
## migadu.com
Good: Down to earth. Unlimited domains, storage, etc. Full marks for philosophical, ethical, and technical merits.
Bad: Difficult to set up. UI is a bit confusing. Advertises itself in your signature in the free plan. Apparently blocks VPN and Tor users (I have reached out to them about this).
Note: Was unable to evaluate their webmail
## mailbox.org
Good: excellent PGP support and good on other security fronts as well
Bad: requires google captcha, does not handle plaintext as well as I'd like, german leaks through into the english interface sometimes, too scatterbrained
## runbox.com
Good: Goes above and beyond in support for various standards and protocols, handles plaintext email very well. Lots of good options for account security.
Bad: rough UI
## summary
migadu is hard to set up but is the best all-around offering. If you're security concious, mailbox.org has the best PGP support and good all-around security; runbox.com has good account security options but no built-in PGP support.
Evaluated but not recommended: disroot, fastmail, posteo.de, poste.io, protonmail, tutanota, riseup, cock.li, teknik, megacorp mail (gmail, outlook, etc)
@sir Hello, I've been using Runbox, with my own domain for a few years, and I'm now considering Protonmail. 2 avantages of the latter : "zero access encryption at rest" and it's located in Switzerland (so out of 5 / 9 / 14 Eyes, contrary to Runbox's Norway). Meanwwhile, I just discovered you thanks to your post about Signal (in which you make very valid points !), so I'm very eager to understand why Protonmail should be avoided.
I wrote exactly about this back in 2014
https://ipsec.pl/protonmail-security-promise.html
Protonmail is subject to Swiss privacy *and* data retention laws which are just as favorable for lawful interception as everyone else's.