The design with multiple domains is pretty annoying.

So I register [email protected] but forget to register [email protected] and anybody can squat it and impersonate me from the same service?

Not to mention they blocked my IP after registering 3 of the 5 available domains.

Same problem with the old GMX. "was that [email protected] or [email protected]" - I get it, people should be able to differentiate, but they're really not.

I'm using my own domain anyway. When your last name is your domain, it gets impossible to impersonate you with any free service. And as it's only 1 Euro, it's also cheap and easy.

I would use tutanota if they could change a simpler domain.

When I wake up on the second morning after I've registered an email account, it was impossible for me to remember whether the domain was tunanota, notatuna, nonanuta or tutanote...

> No match for domain "NOTATUNA.COM".

I'm so tempted now.. YMMD :)

temptation too high...

I just tested tutanota. The interface is clean and nice but the encryption to external contacts is the same as in Gmail (link back to tutanota and shared passwords).

Why can't these services use something like OpenPGP's Web Key Discovery [0] fetching key from https://domain.com/.well-known/openpgp/hu/hash-for-localpart and avoid links altogether?

[0]: https://www.gnupg.org/blog/20160830-web-key-service.html

Avoiding links is the ultimate goal, hopefully Tutanota will integrate your suggestion or something similar. I've moved my entire family to Tutanota, which also works quite well. But you'll never convince everybody...

As far as I know self-destruct emails in Gmail are not end-to-end encrypted.

Good to hear, I'm also interested in that (hushmail, mailbox.org also use link backs).

Is there an issue tracker or a mailing list where one can subscribe and see when this would be available?

Is it open-source like protonmail?

Yep: https://github.com/tutao/tutanota/

Devs say they want to publish the app on F-Droid. https://tutanota.com/blog/posts/secure-mail-open-source

Did I get this right: the client is open source while the service that works in the backend and does 80% of the job is closed source?

So the source isn't of much use except for verifying that the encryption is robust?

How is that for protonmail?

In Protonmail client is open source, server and apps are not.