I have compiled my official mail provider recommendations. With any provider, you must always use your own domain.

## migadu.com

Good: Down to earth. Unlimited domains, storage, etc. Full marks for philosophical, ethical, and technical merits.

Bad: Difficult to set up. UI is a bit confusing. Advertises itself in your signature in the free plan. Apparently blocks VPN and Tor users (I have reached out to them about this).

Note: Was unable to evaluate their webmail

## mailbox.org

Good: excellent PGP support and good on other security fronts as well

Bad: requires google captcha, does not handle plaintext as well as I'd like, german leaks through into the english interface sometimes, too scatterbrained

## runbox.com

Good: Goes above and beyond in support for various standards and protocols, handles plaintext email very well. Lots of good options for account security.

Bad: rough UI

## summary

migadu is hard to set up but is the best all-around offering. If you're security concious, mailbox.org has the best PGP support and good all-around security; runbox.com has good account security options but no built-in PGP support.

Evaluated but not recommended: disroot, fastmail, posteo.de, poste.io, protonmail, tutanota, riseup, cock.li, teknik, megacorp mail (gmail, outlook, etc)

@sir Hello, I've been using Runbox, with my own domain for a few years, and I'm now considering Protonmail. 2 avantages of the latter : "zero access encryption at rest" and it's located in Switzerland (so out of 5 / 9 / 14 Eyes, contrary to Runbox's Norway). Meanwwhile, I just discovered you thanks to your post about Signal (in which you make very valid points !), so I'm very eager to understand why Protonmail should be avoided.

@saroumane Protonmail lies about the capabilities of its encryption - it's entirely plausible that they would start recording your plaintext emails, perhaps in response to a sopeana, or a change in ownership, and you would never know. They then use these faux-privacy guarantees as justification for not supporting industry standard & open protocols, which is just a cover for promoting vendor lock-in.

Follow

@sir @saroumane

I wrote exactly about this back in 2014

ipsec.pl/protonmail-security-p

Protonmail is subject to Swiss privacy *and* data retention laws which are just as favorable for lawful interception as everyone else's.

Sign in to participate in the conversation
Mastodon 🔐 privacytools.io

Fast, secure and up-to-date instance. PrivacyTools provides knowledge and tools to protect your privacy against global mass surveillance.

Website: privacytools.io
Matrix Chat: chat.privacytools.io
Support us on OpenCollective, many contributions are tax deductible!