Email services are still a very popular communication solution, but securing them is not an easy task. In fact, if secure communication is your priority, you should avoid using email all together. With the revelations made by Edward Snowden, the issue has become much more apparent to the general public that was not aware of the vulnerabilities of email communications and how easy they could be snooped on. Lavabit and Silent Circle were encrypted email services that decided to shut down their servers instead of giving in to the demands of the NSA to infringe on their privacy policy. The story quickly circulated that Edward Snowden had an account with Lavabit and probably played an important role in the pressure put on them by the NSA.
The problem with securing email is that it needs to be encrypted end-to-end to avoid it being intercepted while traveling through intermediary networks and the recipient also needs to have the same encryption system. These systems, although free, are often hard to setup, and trying to convince the other party of the importance to do so may be futile. The way email protocols work, also facilitate data leakages, due to the nature of the email sitting on a server waiting to be retrieved. However, if you still need to use email communications for sensitive data, or simply want to keep your emails private, there’s a fair selection of privacy advocates offering encrypted secure email services free of cost.
ProtonMail
Without a doubt, ProtonMail is a leading name in the world of encrypted email services. When the leaked documents by whistleblower Edward Snowden first surfaced, scientists at CERN, the European Organization for Nuclear Research, discussed their concerns over NSA surveillance and other similar programs. A group of physicists and engineers worked together to create a secure email service like no other.
ProtonMail was born and it quickly gained notoriety among the privacy community thanks to its bold stance against government surveillance. They keep full control of all their mail servers in Switzerland to avoid any forced shut downs or requirements to provide any server data to U.S. or other foreign surveillance organizations. Although nowadays, even Gmail offers some level of end-to-end encryption, Forbes has called ProtonMail “the only email system the NSA can’t access”.
ProtonMail stands apart thanks to their strong commitment to privacy. After a successful Beta launch, ProtonMail expanded and it currently offers plans for individual and business users. ProtonMail offers full end-to-end email encryption, from start to destination. The encryption happens at the user’s level, making it impossible for ProtonMail to see the original content. The email is already encrypted when it reaches their Switzerland-based servers and the recipient’s email password is the only key to that email.
Unlike most other secure email providers, ProtonMail does not require any kind of setup, allowing just about anyone to easily use the website on their browser on all devices thanks to a clean responsive design. ProtonMail does not have the keys to decrypt any of the emails sent across their network, unlike services like Gmail, who do have the power to decrypt email messages. If authorities would request keys, they would not even have the possibility to provide them as they only retain encrypted data on the servers.
Strategically based in Switzerland, ProtonMail will decline any third party requests from overseas organizations or governments. Local government values privacy and has a very low wiretapping and data seizure track record, used explicitly to prevent crime. ProtonMail has refused offers from various investors to keep their integrity intact. Instead, they have opted for crowd funding methods and affordable paid plans to keep them afloat, allowing their user base community to donate to the cause, while keeping conflict of interest investors at bay.
ProtonMail offers a free plan (with limited features), that allows you to discover the security advantages of the service. This plan gives you up to 500MB storage and 150 messages per day. However, if you want to enjoy priority support, higher storage capacity, more emails per day and additional features, the best option is to upgrade to a paid service. The prices start at $4 USD per month. The provider also launched a VPN service called ProtonVPN and if you opt for the Visionary plan, the VPN is included.
Mailfence
While ProtonMail offers an impressive list of features and it is one, if not the most popular service of its kind, there are other options that deserve recognition when it comes to security. Mailfence is one of them. For nearly two decades, this email service has been offering a reliable and secure way to manage email communications. Mailfence is based in Belgium, a country with strict privacy laws. Thanks to its location, Mailfence doesn’t have to comply with request from US agencies like the NSA. Mailfence doesn’t feature third-party ads and it doesn’t have marketing trackers in place. Mailfence’s SSL/TLS certificate doesn’t use any certification from US organizations in the certification chain. Since Mailfence’s code is open, it can be audited independently by security experts. In addition, the provider has implemented a transparency and warrant canary report that will alert you in case any data requests are received.
To secure your emails, Mailfence uses OpenPGP end-to-end encryption. Thanks to this, the information is encrypted on the sender’s system and it can only be decrypted by the intended recipient. No one else but the person you sent the message to, will be able to read it. While the private key is stored on Mailfence’s servers, they are not able to read it since it is protected with your passphrase through AES-256. Nobody else, not even Mailfence, will be able to decrypt your messages. It is also worth noting that Mailfence supports digital signatures. This is a feature that provides stronger security since it prevents forgery and impersonation. Digital features ensures the integrity and authenticity of your messages.
In addition, Mailfence features an integrated keystore, which lets you create, import, publish and manage OpenPGP keys easily. There is no installation needed and apart from generating a key pair, the keystore allows you to import pre-existent OpenPGP key pairs. You will have complete control to complete your tasks. The keystore also supports advanced key management operations. With Mailfence, you will be able to generate or import multiple key pairs, which is something that other email services don’t offer. Mailfence also uses two-factor authentication, Perfect Forward Secrecy and HTTP Strict Transport Security (HSTS), which is enabled on all web pages. In addition, Mailfence offers convenient functionality (such as calendars and groups) that will allow you to manage your email conversations without hassle. There is a free plan available, and the paid plans start from 2.50 EUR.
Tutanota
Tutanota strives to offer a simple solution that also provides a high level of security. All the emails sent and received using this service are encrypted throughout their entire journey from the sender to the receiver. Third-parties won’t be able to access the private encryption key and to send secure emails to other Tutanota users, you just need your email account. It is also possible to send messages to people who don’t have a Tutanota account. All you need to do is to provide a password to that person so that they can access the email. This provides strong protection for your email communications, but just make sure that you send the password information through a secure communication method. For instance, you can use Telegram or other encrypted messaging app.
Tutanota’s email interface is user-friendly and easy to get used to. You can decide if you want to send an email encrypted with a password, or if you don’t want to use password protection. For encryption, Tutanota uses AES and RSA. The service also offers the chance to create custom folders that allow you to organize your emails in an effective manner. Tutanota also allows you to attach files. The provider supports paid solutions, but it can also be sued for free. Tutanota offers end-to-end encryption as well. Just keep in mind that the servers are located in Germany and while this country has strong privacy laws, there are also concerns about the surveillance methods used by local agencies. In addition, Germany is part of a spying alliance known as the Fourteen Eyes. Tutanota has been blocked in Russia and the United States. You can follow our guide here to unblock tutanota.
Hushmail
Hushmail is a popular service, with nearly twenty years of experience. It is designed to keep your emails protected using advanced encryption methods. Not even Hushmail staff will be able to read your emails. Only the person who has the password can access them. It is possible to send encrypted messages, not only to other Hushmail users, but also to people who use other email services. Husmail’s interface is modern and easy to use, allowing you to send and receive encrypted emails without issues. The service supports two-step verification, as well as IMAP and POP. You can import contacts using a CSV file and the service features 10GB storage. Hushmail also offers spam filter and auto-responder.
One thing to keep in mind is that with Hushmail, you are required to provide an email address and phone during the registration. This may cause concerns among privacy conscious users. Hushmail supports email signatures and it allows unlimited email aliases that allow you to disguise your online identity. Hushmail offers a max attachment limit of 20MB per file and the premium service provides 10GB of storage. Hushmail has become the favorite choice for many people due to ite ease of use. However, since it is based in Canada (meaning that it is within the jurisdiction of the Five Eyes spying alliance) and the password strength is not enforced, it may not be the best choice if you want the highest level of privacy. ( Read our Hushmail Review )
CounterMail
While CounterMail’s interface is not exactly modern and appealing, the main focus of the service is security so the appearance is not relevant at all. The system is updated in a regular basis to ensure the highest standard of security. CounterMail also supports end-to-end encryption between the sender and receiver. It uses OpenPGP to keep your emails protected and ensure that your account is not compromised. CounterMail uses diskless data servers to prevent others from interfering (reading or writing) with the data sent through the servers. CounterMail is also recognized thanks to its transparency and practical features. It offers IMAP support and it gives you the chance to modify multiple settings in your account.
CounterMail doesn’t keep logs of the IP address you use to access the service and it has a password manager included, as well as password protection. This provider also uses anonymous email headers and it supports email filters to help you get through your emails in a productive way. The service also provides cloud storage starting with 250mb and above. This Sweden-based provider offers affordable plans (one year of service costs $59, which means that one month of service costs only $4 USD. Although the interface and the website are outdated, CounterMail is a well-established solution that also supports physical security with a USB device.
Other Secure Email options
RiseUp.net
Riseup is focuses on providing secure communication options for activists. In order to use RiseUp’s services, you will need to request an email address or get an invitation from users you know. It is important to keep in mind that due to the nature of the service, during the signup process, you will be asked to answer questions about your political beliefs. No logs of your IP addresses are kept and there is an on-screen keyboard available to support secure login in case you are using a public computer or are concerned about keyloggers. RiseUP supports Perfect Forward Secrecy and POP/IMAP.
TorGuard
TorGuard is known for its VPN service, but this provider also offers an encrypted email that is designed to protect your email communications. It supports OpenPGP and it offers effective protection against Man in the Middle Attacks and other threats. Your emails won’t be accessible to others. Apart from its security features, TorGuard offers practical features such as easy key storage, notes, calendar and tasks. There are different plans available, including a free one. The yearly paid subscriptions costs $49 USD.
GnuPG
If you are feeling confident about your technical skill, you can try GnuPG, a free implementation of OpenPGP. It will allow you to encrypt and sign your email communications. GnuPG offers a flexible key management system and it supports S/MIME and Secure Shell (SSH). The set up is a bit complex, but it is a free and comprehensive solution to protect your data.
Bitmessage
Bitmessage is another option that you can consider. This service allows you to use the Bitmessage network like you use your email, without having to use additional software. The service is free, but it won’t spam you with ads. There is no tracking with Google Analytics or other srervices and you can exchange emails without hassle. You can continue using your regular email client, but adding security and other convenient features
NeoMailBox
Based in Switzerland, NeoMailBox is a solution with over 15 years of experience. It provides a secure and fast email service with strong encryption and anti-virus protection. NeoMailBox supports unlimited aliases, SSL and OpenPGP encryption and it can also hide your IP address. NeoMailBox is easy to use and it supports unlimited disposable email addresses.
ShazzleMail
ShazzleMail was established in 2006, but it only completed Beta testing recently. The new version will be available in 2020. In the meantime, those who have already downloaded version 1.0 can continue using the service.
CryptoHeaven
This provider offers a zero-knowledge solution that offers a high level of security, through its encrypted email. CryptoHeaven delivers end-to-end encryption and it gives users the chance to access their hosted online email and online storage account from any location.
Autistici/Inventati
Autistici/Inventati or A/I is an Italian service created by a team of activists, tech fans and experts committed to help users to enjoy a free and secure service to protect their data. Autistici/Inventati supports not only email, but also other anonymity services such as personal VPN, forums and chat. The service uses Roundcube webmail interface and there are about 25 domain names available. To sign up, you need to request an account and install their self-signed TLS certificate. The email supports POP/IMAP and PFS, as well as antivirus and spam filtering. While the service is free, since it is ran by volunteers, we encourage you to support them with a donation.
Remember to use email on extremely sensitive data only if necessary, but if we talk in more realistic terms, the majority of us don’t have anything to hide. It comes back to the simple principle that no one else should be reading your emails but you. Think of how creepy it would be if the mail man read your mail back when hand written letters prevailed and email was not even a term yet. The act of opening someone else’s mail is not only frowned upon, it is criminal. Why should it be any different with our emails? The safety issues are also very uncertain and complex, as collected data mining can allow for a collection of data to be used on a sparse time lime
HI did anyone try to look at http://sixscape.com/
Can anyone comment on Neomailbox.com? I used them for two years and it was fine for first year, second year I started getting all sorts of scam emails with attachments. Then the big scam happened someone, some hacker got into my Neomailbox account and stole all the emails. He used my emails, gathered my profile, phone numbers, etc and used this to call my father and pull a damaging ITunes gift card scam. They convince my 83 year old father to go out and buy $4000 worth of ITunes gift cards, claiming they were me and that I had some financial dire straits. This worked as he lives alone, is senile, post stroke diabetic, and I live overseas so there was room for a crook to manipulate him,
To add insult to Injury Itunes / Apple refused to co-operate with the police (July 2016) to investigate the caller and follow up on the Itunes redemption code trail. Now, only this month (Dec 2016) Apple added a page regarding this. It asks victims of the ITunes scam to please inform them! Too little too late. This scam has been going on for more than a year and they have gladly reeped the profits. Even NBC news in USA covered it. Also, not the only Apple ethical disaster over past year, I hear pay very little tax do to their base in Ireland and then going back to 2011 when it was revealed that their factories in China are in breach of fair labour conditions laws.
Great topic.
And a lotof great comments with good info.
I’ll just suggest salusafe free server for Android, Windows, Linux https://www.salusafe.com which has secure chat.
Thanks!
Protonmail doesn’t work. We tried it for > 1 week and only receive 25%, if any, of our replies. After being used to very active email activity, suddenly w/Proton it was Crickets. Not to mention the Gloomy Black coloring. The send doesn’t work well either.
We sent some to ourselves at Proton and 75% never showed on 2 emails and 0 (yes, 0) came thru on the other. We have no idea how many clients or potential clients we have lost or frustrated. We believe in providing superb CS. We retreated back to our regular email site (which is changing soon) unfortunately.
Tutanota won’t work bec we tried to post a resume on cl and got a “Blocked” which was astonishing and pathetic of them.
Mailbox.org seemed to be a possibility (ugh) until we spent all day (many days) trying to get to our email–or even their website to pop open. :/
We’ve used Yandex for couple yrs w/out realizing they track your IP opening on your email for the world. Now isn’t that just nice of them. 😛
Back to the drawing board.
SophiMail is a premium business email with emphasis on security and privacy.
By default, SophiMail hosts on EQUINIX in Switzerland and gives you an extra, daily backup on premise.
On top, SophiMail offers advanced privacy and encryption options, to match your company’s specific requirements, hosting on any location you trust, on premise included. We deploy on physical, VM or cluster, for high availability. We take pride in offering higher quality email than most of the established competitors having other core businesses today.
SophiMail actively supports your Business Continuity.
Visit us on http://www.sophimail.com and the blog, for more details.
Indeed an informative list – but a short list that do not include some of the other remarkable players, that does everything on the client-side and truly provides end-to-end encryption (which by far is the only way that can ensure one’s online data confidentiality and integrity during transit).
Following are two of those outstanding services.
> https://mailfence.com/ (a pure end-to-end encryption service – that does not only provide confidentiality and integrity but also authentication via the capability of digital signatures, based on OpenPGP – it provides user full control over their keys and does it all in a very user-friendly manner)
> https://scryptmail.com/ (another nice end-to-end service – that provides great reliability and hot features like disposable email addresses etc, based on OpenPGP and has a nice descriptive interface)
Now, the ultimate tool when it comes to OpenPGP and end-to-end encryption – is always have been GnuPG, though the reason it never really get lifted up is due to its complexity in terms of usability from a typical user standpoint (however, implementations like Gpg4Win, GPGSuite, Seahorse does come in handy).
Lastly, the article is not bad at all, the only loose-end is not mentioning some of the key players. Nevertheless, it always drops down to one’s preferences and requirements (I personally use mailfence which is free, interoperable, without ads, completely locally hosted and provides an entire collaboration suite i.e. messages, contacts, calendar, documents, polls, tags ….)
Again, its a matter of personal preference and the extent to which one understand end-to-end encryption technologies (OpenPGP, S/MIME etc, which most of the people don’t) – that contributes in the rightness and wrongness of their online privacy decisions.
scryptmail servers are in USA!
But Mailfence looks very good, with many features.
200mb for a free account, or 2.50 euros for 5gb, with POP/IMAP/SMTP and 2FA.
POSTEO os another great company in Germany, very ecological, servers are powered by wind turbines I think.
RUNBOX in Sweden is also excellent. Encryption end to end, but servers not. They explain that the servers are located in extremely safe facility. 30 day trial, then $20/yr.
We started using NeoCertified.com recently, been happy so for works well for HIPAA compliance.
Have you heard of https://www.thexyz.com before?
I really like their apps and reliability. They also offer encryption and strong 2FA.
It’s from Canada, back door to US. Although their website doesn’t say nothing where they are located.
You forgot about tutanota.com
Not sure why one would be rocking about ProtonMail so much. It is not any better than tutanota.com which comes free with 1G of space.
ProtonMail seems to be just a good business oriented email provider with bunch of folks coming from elite universities claiming that switzerland is the safest country for encrypted email provider. I don’t see a reason why it has to be in Switzerland, since it should be encrypted in a way that there is no possibility for decryption. Tutanota does it that way and then it doesnt matter anymore where the servers are, except of the USA where such email provider company cannot even start to operate.
I found Invmail to be more secure when i compared against Protonmail etc its also they use 4096 bit RSA’s. they are in open beta, they also offer private solutions as well as Video/Voice Calls, and Messaging over encryption channels.
Hufu is server less. It only means that users of this app should not be worry about Hufu recording their personal information
For robb – you are a bit retarded ain’t you ? It’s called PROTON, not PROTRON, you moron!
Maybe he wants to hide from the liteal search algos which will exclude his site/posts based on inkowrekt spelleeng. Geneyus , isn’t he ?
Check shazzlemail.com It was developed for really secure communication. You mobile device is your email server. Content will go from one device to another directly without passing any servers. They have solution for medical business shazzlemd.com
FORBES picked PROTRON. We use it and it has been tested by….well, it is the ONLY safe one against NSA.
Which browser are you using with protonmail?
Protonmail is based in Switzerland and does not have to follow/fall under USA law and jurisdiction, HOWEVER, Protonmail has now teamed up with Facebook and facebook falls under USA law and jurisdiction and P.R.I.S.M (PRISM) , , , go figure if protonmail is 100% safe or not when they have teamed up with FaceBook….. I’m still looking for a safe email provider, NOT based in the US and who does not have any involvement with USA since NO USA based storage or email provider are safe from NSA peeping and Snowden is a living proof of that NSA leaks… If you want safe data and email do not use storage and email companies based in USA. my 2 cents 🙂
For Daniel. Proton has not “teamed up” with Facebook, they simply have a Facebook page, they use to advertise. Please cite your source that Protonmail emails are accessible to Facebook.
Why not use Yandex? They are Russia’s largest internet company, and since Obama has restarted the Cold War, they won’t give any info to the NSA or US corporations. It works really good and is the biggest provider in Europe.
You must be kidding me Russian servers is always under control of KGB! There is no secure Internet in Russia.
Tutanota seems to work..
Yes, it is second to PROTRON
Hey Robb,
Just a random question since you appear knowledgeable and I am one:)
Have you heard of startmail?
It was created by the people who made smartpage and ixquick,which I believe are suppose to be safe search engines. Very new to this, just started looking into it and at extreme beginning of learning curve with this stuff,but I do feel having our emails read, no matter how boring,mundane and non important they may be, is un-constitutional. This was referred to me but I don’t see anything on it.
Oops, that was to say,,,I am NOT, not I am one. Sorry:)
Definitely https://tutanota.de
It’s open source and the only one fully encrypted. Proton does not encrypt contacts, which I found out after a password reset – contacts were still readable with the new password. That made me switch because it’s a total no-go.
Hi,
I read your review of ProtonMail and wanted to tell you about my company’s “ProtonMail killer”. We call our technology Envelope-Content Splitting (ECS) and when added to a mail client (we currently offer one mobile product, ChiaraMail for Android, available for free from Google Play, with more implementations coming), makes the mail content invisible to eavesdroppers, such as mail servers and the NSA. Rather than explaining in words how ECS works, here’s a short animation that shows ECS in action: https://www.youtube.com/watch?v=p6FqbYWFCCY
Here are some points to consider:
1. No encryption is needed to secure mail content in transit.
2. According to Qualys SSL Labs, the ChiaraMail content server is more secure than Google’s or ProtonMail’s (cf. https://www.ssllabs.com/ssltest/analyze.html?d=google.com&s=74.125.239.142, https://www.ssllabs.com/ssltest/analyze.html?d=protonmail.com&s=185.70.40.106 and https://www.ssllabs.com/ssltest/analyze.html?d=chiaramail.com)
2. Besides offering unbreakable in-transit security, ChiaraMail for Android provides 100% protection from spoofing and phishing attacks, gives senders the ability to change or delete their e-mail content after the message is sent, send large attachments directly to recipients, without requiring the use of kludgy third-party storage services, such as Dropbox or Google Drive.
3. Unlike ProtonMail, ECS works seamlessly with any e-mail address.
I welcome your review of our product and look forward to speaking with you soon.
Regards,
Robert Uomini
CEO, ChiaraMail Corp.
Robert Uomini
CEO, ChiaraMail Corp.
Ok, Robert tell me who I am and where I’m at and I will try your product.
Rob…. Really like the concept but you need to explain your business far better than the website does. On the face of it, your business model has some very critical issues which are not clearly explained or addressed.
1. Amazon Web servers… Seriously. I liken this thought process akin to allowing the fox in to the chicken coop. Why do you think that Protonmail set up in Switzerland? I needn’t provide the countless links discussing the closure of various organisations due to USA issues.
2. Server encryption. Very little is explained on your site:
“Your original content is automatically encrypted at the source using Advanced Encryption Standard 256-bit, a symmetric key encryption methodology widely recognized as one of the strongest in the world.
Once encrypted, your content is securely delivered to a content server using Hypertext Transfer Protocol Secure (HTTPS), the same secure protocol used by financial institutions and e-commerce sites
Can the government order ChiaraMail to give them my stored e-mail content?
Yes. However since the message content is encrypted by default and only the sender and recipients have the key to decrypt the message, neither ChiaraMail nor the government would be able to decrypt and read the content stored on the content server without access to the original e-mail message.”
All this opens up many questions but perhaps the basic one is the encryption methods used, are they based on “Open Source”? What Types? It is very short on detail. It suggests client side encryption but the process and details is non-existent. To be credible, you need to address the obvious shortcomings….
This could be a really rock solid and perhaps as bullet proof as you could get…… but you need to explain yourself much better than at present. Perhaps a greater focus on disclosure?
Rob
You have some issues on this front too. Run a test and see what you get:
https://www.ssllabs.com/index.html
The “A+” you claim in your link is out of date. I suggest you refresh and re-run the test. It clearly shows “B”. You may wish to upgrade on a few fronts including the misleading info on your website.
only Protonmail!!!
CounterMail (based in Switzerland) offers diskless web servers. Now that is privacy for you.
https://sigma.email operates HSE email services that are NSA Bullet Proof. with AES256 drive encryption and random unknown keys.
Ah, nope. This one has holes. PROTRON is the ONLY one, NSA safe.
Protonmail has routed all their server to Israeli Radware for scanning for DDos attacks BUT Israeli IDF spy network now has total a grip of protonmail privacy. What a shame?
I feel that protonmail attacks has came from the same people who offered Protonmail an offer that they could not refuse.
NOT true.
Here’s Proton’s answer to malicious rumors like yours:
https://protonmail.com/support/knowledge-base/protonmail-israel-radware/#comment-2632
ProtonMail, Israel, and Radware relationship
ProtonMail is one of the only email providers which provides comprehensive DDoS protection. In order to provide this protection, we have partnered with Radware, one of the leaders in DDoS protection. Recently, malicious rumors have surfaced that our partnership with Radware means Israel has compromised ProtonMail email privacy (since Radware’s international headquarters is in Israel). These rumors have mostly been spread by conspiracy theorists who don’t at all understand ProtonMail’s technology.
These rumors are categorically false and stem from a fundamental misunderstanding of how ProtonMail’s DDoS protection works. ProtonMail protects against DDoS attacks by using BGP redirection and GRE tunnels. This means that Radware only handles incoming traffic, and all incoming traffic is encrypted. Both encryption layers (SSL and ProtonMail’s OpenPGPjs) are intact in this solution. That’s why we picked BGP redirection instead of more inexpensive DNS based DDoS protection systems like Cloudflare. In other words, Radware only sees encrypted packets and nothing else. Furthermore, we only send traffic to Radware when ProtonMail is under DDoS attack, during normal conditions, traffic is routed normally through Zurich and Radware doesn’t even see encrypted ProtonMail network traffic.
The statement that ProtonMail traffic is proxied through Israel is also false. When traffic is redirected during a DDoS attack, ProtonMail traffic goes through DE-CIX in Frankfurt, Germany. This can be seen by doing an IP lookup of the last hop of the traceroute. The IP address is at DE-CIX, so traffic passes through Frankfurt (subject to German data privacy laws) and NOT Israel. However, as discussed above, even IF the traffic did pass through Israel, the DDoS protection technology we have selected means there would be no compromise to ProtonMail email privacy.
We take privacy seriously at ProtonMail which is why we carefully designed and implemented a DDoS protection scheme that would not lead to ANY weakening of privacy. The solution we have implemented protects privacy on a technical level, so that no DDoS protection company, regardless of where they are based, can compromise our email privacy. Thus, ProtonMail offers the best of both worlds, comprehensive DDoS protection without sacrificing privacy.
On a related note, we have also had people ask us about ProtonMail’s official position regarding the ongoing Palestinian-Israeli conflict and whether working with an Israeli company means we are taking sides in this conflict. The answer is NO. ProtonMail is a beneficiary of financial support from the Swiss government, and we also adhere to a policy of strict neutrality.
The only position we take is that security and privacy are fundamental human rights which should be guaranteed for all.
When picking companies to partner with, we only consider two criteria:
Does the proposed solution meet our technical requirements regarding security and privacy?
Does the proposed solution meet our budget constraints, given that ProtonMail is largely supported by donations?
When viewed entirely objectively, Radware satisfies both conditions which is why we entered a partnership with them. While many conspiracy theorists have criticized our partnership with an Israeli company, many of these same people miss the fact that we also partner with Cyberkov, a company from Kuwait that is very active with helping Palestinian dissidents (https://cyberkov.com/partners-references/).
This is in fact a long running partnership dating back to June 2014 which well pre-dates partnering with Radware.
In fact, it is due to this partnership that ProtonMail was wrongly attacked by the US media as being used by ISIS. Thus, the inference that we don’t support Palestinian activists is not only entirly false, it ignores the large risks we continue to take to support that community with Cyberkov.
We believe that selectively boycotting companies solely based on nationality and government policies that companies cannot control, is not only incorrect, but counter to the principles which ProtonMail is based upon. For this reasons, we remain fully committed to maintaining our neutrality and protecting privacy rights for all groups.
Its like privatoria doesnt allow any non-alphabet characters in the password field, which is hilariously bad in 2015.
Its like privatoria doesnt allow any non-alphabet characters in the password field, which is hilariously bad in 2015.
—
Maybe you mistaked? My https://privatoria.net/ password includes non-alphabet characters, there is no problem.
Another good service is Sub Rosa from https://novo-ordo.com. They use only encryptrd links for IMAP, POP, and webmail. Webmail can also be accessed through TOR. Anonymous and self-destructing email are availableto subscribers.
PGP encrypted, SSL connected Secure E-mail from https://privatoria.net/. It is developed for really secure and anonymous communication. The history of communication is removed from the system every 24 hours. You can also change your IP to send anonymous e-mail and be sure no one could track you.