News for hackers. Stuff that matters.
Re:Improved Authentication for Email Encryption and Security by Wonnk13 on Sunday December 04, 2016 @08:08AM (#13099853)
how practical is it to drop GMail for these guys? I'm tied fairly heavily to the Google ecosystem (Chome, Play, Finance, etc etc). They already have a mountain of data on me, but I really want to start taking encryption and privacy more seriously.
Re:Improved Authentication for Email Encryption and Security by ShinyCyril on Sunday December 04, 2016 @08:20AM (#13099888)
I didn't miss anything when I left Gmail, but I imagine it depends a lot on how you use email. I switched to Fastmail on my own domain and actually prefer the webmail interface over Gmail.

I mainly use IMAP via Mail.app on my laptop and phone, Pantheon Mail (formerly Geary) on my desktop. I use PGP wherever I can. I haven't received any spam at all yet, so I can't comment on how their spam filters compare to Gmail. I maintain a zero inbox – important stuff gets archived, and everything else is deleted. This means that I don't miss Gmail's search feature as hardly keep any emails. Obviously your mileage may vary here. They also support CalDAV and CardDAV – so all of my notes, contacts, calendar items etc. are synced across my devices.

I've moved from Google completely, and for the most part, I don't really miss them all that much.

- Search -> DuckDuckGo (I do miss Google here – DDG's search results pale in comparison)

- Gmail -> Fastmail

- Maps -> Citymapper and Apple Maps

- Chrome -> Safari on macOS, Firefox on everything else (my experience with FF is a bit 'meh' – it was incredibly laggy on my work laptop, but runs great on my desktop)

Re:Improved Authentication for Email Encryption and Security by mark_l_watson on Sunday December 04, 2016 @10:21AM (#13100211)
I have done the same, but with exception of being a paying customer for Play Movies and Play Music. I also buy extra GDrive storage, and use it for encrypted backups of my laptop (I have backup scripts that ZIP up my writing and work projects, GPG encrypt them, and I manually transfer the files to GDrive.

Google does derive real revenue from me, but not so much via their advertising business.

Edit: FastMail is a very good email service, BTW.

Re:Improved Authentication for Email Encryption and Security by thelittleone on Sunday December 04, 2016 @10:09PM (#13103122)
For others interested in Gmail -> Fastmail, Fastmail also has an inbuilt IMAP migration tool:

https://www.fastmail.com/help/receive/migratemail.html

Re:Improved Authentication for Email Encryption and Security by Whitestrake on Monday December 05, 2016 @12:44AM (#13103616)
During my migration from GApps (prior to G Suite), I used this tool. I performed an initial migration before changing my MX records, then followed up a few days later with a second (partial) migration to pick up a few slackers.

I found the tool to be fast, comprehensive, and the partial migration was very effective.

Re:Improved Authentication for Email Encryption and Security by kimburgess on Sunday December 04, 2016 @11:27PM (#13103357)
I've recently made a similar switch to a few of my 'core' services. Aside from a strong privacy bent, one of my core requirements has been to lessen my dependency on US based companies and infrastructure.

One the search front, I've been finding https://www.startpage.com/ to be a really nice alternative to DDG.

Re:Improved Authentication for Email Encryption and Security by danieldk on Sunday December 04, 2016 @12:50PM (#13100853)
I haven't received any spam at all yet, so I can't comment on how their spam filters compare to Gmail.

I receive more spam in my inbox than in Google Mail (I used Google Apps), but it's not extreme. Typically two or three spam mails per week.

Of course, you get a lot back. As you say, I better web interface and standards-conforming IMAP.

Re:Improved Authentication for Email Encryption and Security by hobarrera on Sunday December 04, 2016 @11:14AM (#13100399)
Pretty much the same here, DDG, Fastmail, Firefox, and Here Maps and Movit for mapping/traveling.

Honestly, DDG surpassed google search years ago. I've preferred Firefox for a long time, and Fastmail's UI and service is incredibly superior to GMail. I guess the cost might be the only downside.

Re:Improved Authentication for Email Encryption and Security by nwuensche on Sunday December 04, 2016 @09:24AM (#13100068)
Right now, I also try to keep Google as far away from me as I can. Unfortunately, I don't own a domain myself. Have you tried out ProtonMail yourself? If so, do you think that it is a good alternative to a self-hosted server like Fastmail?
Re:Improved Authentication for Email Encryption and Security by ShinyCyril on Sunday December 04, 2016 @12:20PM (#13100708)
I have not used ProtonMail myself so I can't help you there I'm afraid.

While I use Fastmail with my own domain, it is not self-hosted. My MX records point to Fastmail's servers.

Re:Improved Authentication for Email Encryption and Security by dgoujard on Sunday December 04, 2016 @09:39AM (#13100102)
Fastmail is not self hosted it's like protonmail a mail provider. I also use fastmail, it's less expensive and more private than gmail
Re:Improved Authentication for Email Encryption and Security by terraforming on Sunday December 04, 2016 @09:53AM (#13100142)
Does Pantheon-Mail support PGP?
Re:Improved Authentication for Email Encryption and Security by ShinyCyril on Sunday December 04, 2016 @12:23PM (#13100717)
It does not. I really hope they add the feature soon – in the meantime I use gpg on the commandline.

I've been tempted to add the support in myself, however I do not have any experience with the elementary codebase or Vala, so a cryptographic system would be a very poor choice for a first project!

Re:Improved Authentication for Email Encryption and Security by drdaeman on Sunday December 04, 2016 @09:02AM (#13100002)
One downside what totally prevents me from even giving ProtonMail a try is vendor lock-up. You'll be stuck with them with no option to migrate away while keeping historical data. No IMAP, no POP3, not even a proprietary backup format, nothing at all.

One could probably automate a browser to log in, iterate mailbox and dump contents, but that certainly won't be fun.

(Also, no way to use your own pre-existing key, only somehow generating a new one somewhere - not sure how exactly it's implemented and whenever I can trust it all...)

Re:Improved Authentication for Email Encryption and Security by vabmit on Sunday December 04, 2016 @09:49AM (#13100130)
IMAP support is coming very soon. Engineers are working on the code, now. It's a more difficult task than people would imagine because the implementations of the IMAP standards by some clients (like Outlook) is a bit... "interesting".
Re:Improved Authentication for Email Encryption and Security by hobarrera on Sunday December 04, 2016 @11:12AM (#13100388)
How would this IMAP implementation work? Some kind of local proxy that does the decryption on-the-fly?
Re:Improved Authentication for Email Encryption and Security by vabmit on Monday December 05, 2016 @09:30AM (#13105521)
Yes, exactly. The client is able to install and run a local proxy/translator application on their machine (currently, it's called a "bridge"). Their IMAP client connects to it and it interacts with ProtonMail's APIs over HTTPS. Since the bridge runs locally, the private key is locally decrypted with the client's password. The password is never sent to the server. The decryption takes place locally in the bridge software running on the client's computer.
Re:Improved Authentication for Email Encryption and Security by LeoPanthera on Sunday December 04, 2016 @08:52PM (#13102896)
Since they use GPG internally I would imagine it simply presents GPG-encrypted mail to you and relies on the client having GPG support.
Re:Improved Authentication for Email Encryption and Security by mvdwoord on Sunday December 04, 2016 @08:11AM (#13099861)
Currently, for me, lack of a calendar is holding me back. As well as some other features, but I could probably overcome those. Relevant uservoice: https://protonmail.uservoice.com/forums/284483-feedback/sugg...
Re:Improved Authentication for Email Encryption and Security by rethab on Sunday December 04, 2016 @09:10AM (#13100028)
Yeah, but it's planned. They also mentioned the calendar coming in a recent blog post.

In general, I should say I am pretty happy with protonmail. I've been using it for over a year now, however, in general I'm still pretty dependent on google for calendar, android, etc.

When it comes to spam, my feeling is that I do get more now. But as long as it is properly categorized -- which it is -- I don't really mind getting it.

Re:Improved Authentication for Email Encryption and Security by nwuensche on Sunday December 04, 2016 @09:28AM (#13100081)
Do you also get ads by protonmail itself or does it come from other websites? And is there any unsubscribe feature like in outlook?
Re:Improved Authentication for Email Encryption and Security by rethab on Thursday December 08, 2016 @06:42AM (#13129731)
No, these are not from protonmail. It's more like p-enlargements, pills etc.. As far as general marketing mails are concerned, no, I never saw an unsubscribe link.
Re:Improved Authentication for Email Encryption and Security by Wonnk13 on Sunday December 04, 2016 @08:14AM (#13099873)
yikes, yea a calendar is pretty important. I suppose org-agenda could substitute but the way Inbox organizes all my travel is worth the fact that Google knows i'm flying to London.
Re:Improved Authentication for Email Encryption and Security by johnchristopher on Sunday December 04, 2016 @08:16AM (#13099881)
>> They already have a mountain of data on me, but I really want to start taking encryption and privacy more seriously.

> I suppose org-agenda could substitute but the way Inbox organizes all my travel is worth the fact that Google knows i'm flying to London.

Well.. at some point you have to choose something over the other.

Re:Improved Authentication for Email Encryption and Security by mtgx on Sunday December 04, 2016 @09:25AM (#13100072)
What you'll want is to forward your Gmail to ProtonMail as soon as possible, because otherwise you'll always visit Gmail first. So forward Gmail and then just keep a pinned ProtonMail tab open, and get rid of whatever Gmail notification extensions you may have. Also disconnect the Gmail mobile app and set-up ProtonMail on mobile.

https://protonmail.com/support/knowledge-base/transitioning-...

What may give you a push is that Google seems to be trying to make Gmail a more proprietary and less of an interoperable standardized email service. Eventually it may not be as easy to get out of that "lock-in" as it is now (even though it seems hard, but it's mostly a matter of habit and will to change to a new service).

Re:Improved Authentication for Email Encryption and Security by kromem on Sunday December 04, 2016 @04:33PM (#13101884)
So I've actually been transitioning my personal communications over to Protonmail (on a custom domain to future proof the address), and keeping Gmail for transactional emails (because of utility in Inbox grouping, Google Now, etc).

I've realized that I don't really care about Google having access to my transactional mail (things knowable from third parties anyways), but do want personal communications properly encrypted. Basically, I've only moved over my "priority inbox," and keep using Gmail for junk.

Very satisfied with Protonmail though. Especially knowing they are working on fixing their lock-in issues.

Re:Improved Authentication for Email Encryption and Security by felisml on Sunday December 04, 2016 @05:21PM (#13102097)
It's worth noting that "things knowable from third parties" and "an aggregation of all your things knowable from third parties" are very different risk profiles, if that's the deciding factor for anyone.
Re:Improved Authentication for Email Encryption and Security by binaryanomaly on Sunday December 04, 2016 @11:42AM (#13100522)
No caldav and carddav implementation are available yet. So if you heavily depend on these it might not yet be ready for you yet. For occasional mailing I find protonmail pretty good - browser and apps.
Re:Improved Authentication for Email Encryption and Security by nerdponx on Sunday December 04, 2016 @08:16AM (#13099877)
You could use Fastmail.