Comment on Delta Chat: The e-mail messenger

LWD@lemm.ee ⁨1⁩ ⁨year⁩ ago

• federatingIsTooHard@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Why send messages (encrypted or not) across multiple providers that get to see who you are communicating with, when you are communicating, and how often you are communicating? (i.e. why not just use a dedicated messaging app that we know doesn’t suck?)

  who do you KNOW doesn’t suck? myself, i like disroot, but i still prefer to encrypt any comms that go across their services, because i can’t explicitly trust them. i don’t even (really) trust riseup.net. it’s always best to encrypt anything thats sensitive yourself and control the keys.

  source

  • LWD@lemm.ee ⁨1⁩ ⁨year⁩ ago

    [deleted]

    source

    • federatingIsTooHard@lemmy.world ⁨1⁩ ⁨year⁩ ago

      i think it’s worth pointing out that pgp-protected messages would still be secure in the case of the kolektiva breach, not that anyone is e2ee for mastodon messages.

      source
    • federatingIsTooHard@lemmy.world ⁨1⁩ ⁨year⁩ ago

      if you (and your friends) control your (and their) keys, then the actual contents of your communications can’t be compromised. i think email is fine if you understand the limitations.

      source

      • LWD@lemm.ee ⁨1⁩ ⁨year⁩ ago

        [deleted]

        source

        • -> View More Comments
• federatingIsTooHard@lemmy.world ⁨1⁩ ⁨year⁩ ago

  What will this do to your traditional email inbox?

  if you are a deltachat user, it creates a directory for your deltachat messages. if not… you are strongly encouraged to use deltachat :P

  source

  • HubertManne@kbin.social ⁨1⁩ ⁨year⁩ ago

    can't you just make a rule

    source

    • federatingIsTooHard@lemmy.world ⁨1⁩ ⁨year⁩ ago

      maybe. depends on your client or provider

      source
• federatingIsTooHard@lemmy.world ⁨1⁩ ⁨year⁩ ago

  What about Protonmail or other email services that doesn’t directly connect to conventional email protocols?

  personally, i don’t trust protonmail, so i haven’t tried it, but i think… it just doesn’t work lol.

  source

  • LUHG_HANI@lemmy.world ⁨1⁩ ⁨year⁩ ago

    What’s the issue with proton? Just the UI being a bit shit?

    source

    • federatingIsTooHard@lemmy.world ⁨1⁩ ⁨year⁩ ago

      they make a lot of promises about security, but email can truthfully only reach a certain level of security. the comment from @RTRedreovic@feddit.ch shows weaknesses in relying in protonmail to protect various aspects of your communications, but they sell themselves as TOTALLY SECURE.

      the lady doth protest too much.

      so they’re no more secure than, say, google, when you implement your own e2ee on top of email with PGP or something. but the promises of enhanced security actually set people up to expect more than that. coupled with the fact that they don’t even let you use imap or pop, it’s not exactly a hacker’s dream service.

      source
    • RTRedreovic@feddit.ch ⁨1⁩ ⁨year⁩ ago

      Proton should be avoided.

      theregister.com/…/protonmail_hands_user_ip_addres…

      arstechnica.com/…/privacy-focused-protonmail-prov…

      cyberwarzone.com/protonmail-complies-with-a-recor…

      encryp.ch/…/disturbing-facts-about-protonmail/

      source

      • LUHG_HANI@lemmy.world ⁨1⁩ ⁨year⁩ ago

        I do agree that’s a fair point about mail.

        source
    • simple@lemm.ee ⁨1⁩ ⁨year⁩ ago

      The UI has improved a lot since their re-brand, so I doubt that’s it.

      source
    • GenderNeutralBro@lemmy.sdf.org ⁨1⁩ ⁨year⁩ ago

      Proton only uses E2EE for the message body (including attachments). The subject and headers are not end-to-end encrypted.

      That’s not entirely unreasonable, since they use that data for the search function on the server side. Nobody’s really cracked the nut of E2EE search, though there’s been some interesting research in the field recently.

      source