Slashdot Mirror


Ask Slashdot: Advice For a Yahoo Mail Refugee

New submitter ma1wrbu5tr writes: Very shortly after the announcement of Verizon's acquisition of Yahoo, two things happened that caught my attention. First, I was sent an email that basically said "these are our new Terms of Service and if you don't agree to them, you have until June 8th to close your account". Subsequently, I noticed that when working in my mailbox via the browser, I kept seeing messages in the status bar saying "uploading..." and "upload complete". I understand that Y! has started advertising heavily in the webmail app but I find these "uploads" disturbing. I've since broken out a pop client and have downloaded 15 years worth of mail and am going through to ensure there are no other online accounts tied to that address. My question to slashdotters is this: "What paid or free secure email service do you recommend as a replacement and why?" I'm on the hunt for an email service that supports encryption, has a good Privacy Policy, and doesn't have a history of breaches or allowing snooping.

322 comments

  1. Take Marissa's advice by OffTheLip · · Score: 5, Funny

    Use gmail.

    1. Re:Take Marissa's advice by Anonymous Coward · · Score: 5, Insightful

      Gmail is great in terms of reliability, spam filtering (best I've found), and features. But if you're looking for privacy, the only company that's probably worse in my mind is Facebook.

    2. Re:Take Marissa's advice by lgw · · Score: 2

      Take Marissa's advice
      Use gmail.

      I'd stick with one of the big providers, if you're going to use web mail at all. I switched from gmail to outlook.com, partly to live a Google-free life, but mostly because the gmail UI kept getting worse and worse. But certainly the latter is subjective, as is one's tolerance for an all-intrusive panopticon.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    3. Re:Take Marissa's advice by Anonymous Coward · · Score: 0

      So what if a person still wants to connect to Microsoft in some way such as through outlook.com At the same time still using Gmail for its reliability. As long as the OS you are using is the latest from the listed company which created it right.

    4. Re:Take Marissa's advice by SpaghettiPattern · · Score: 2, Insightful

      I switched from gmail to outlook.com, partly to live a Google-free life...

      Out of the frying pan into the fire.

      --

      I hadn't the slightest objection to his spending his time planning massacres for the bourgeoisie... (P.G. Wodehouse)
    5. Re:Take Marissa's advice by mysidia · · Score: 2

      Gmail is great period. Regarding privacy; I think their major advantage is they are HONEST, where some of the other more egregious offenders are more concealed.

      You DO have privacy in the sense that your neighbor and random people at Google cannot look at your E-mail.
      You don't give a whole lot up, Although we do know they WILL collect keywords in your e-mail and use it to build a statistical model about you.

      If that concerns you, then your best option is to SELF-HOST your E-mail on your own server or purchase a Paid service, such as Office365 or ZohoMail.

    6. Re: Take Marissa's advice by Anonymous Coward · · Score: 0

      I pay $5/mo and have my own domain through Google apps. No ads.

    7. Re:Take Marissa's advice by CronoCloud · · Score: 2

      I switched from gmail to outlook.com, partly to live a Google-free life, but mostly because the gmail UI kept getting worse and worse.

      What is this "Gmail UI" you speak of? My Gmail UI on the desktop looks like this:

      http://www.claws-mail.org/scre...

      In other words, I have a hard time understanding complaints about the Gmail UI since people DON'T have to use it. That's what IMAP is for, so you can use Gmail with a proper e-mail client.

      You also don't see ads that way AND that enables you to archive locally if you want and use your choice of secure e-mail methods (PGP or S/MIME).

    8. Re:Take Marissa's advice by lgw · · Score: 2

      Microsoft isn't a panopticon. They don't mine your browsing habits, search history, email, phone location history, etc the way Google and Facebook do. Perhaps just lack of competence to do so.

      Google knows your age, race, religion, where you live, where you work, you're sexual preference, your income, your political views, and so on. All in databases the government can take control of at their whim (the government doesn't need their own Muslim database).

      --
      Socialism: a lie told by totalitarians and believed by fools.
    9. Re:Take Marissa's advice by salnikov · · Score: 1

      gmail have very special IMAP implementation (as gmail does not have folders on server side) which has some quirks and may not work very well with every proper IMAP clients.

    10. Re:Take Marissa's advice by edx93 · · Score: 1

      Second. I've used gmail since 2010 (I think) and you know what? I still use it on a daily basis. It's packed with features, integrates well with devices and apps and, best of all, it's not Yahoo! :-) the only downside is the whole privacy thing. But, then, privacy is dead.

    11. Re:Take Marissa's advice by farble1670 · · Score: 1

      Google knows your age, race, religion, where you live, where you work, you're sexual preference, your income, your political views, and so on. All in databases the government can take control of at their whim (the government doesn't need their own Muslim database).

      Has the govt taken control of their DBs? No.
      Would they like to take control of Google's DBs? Yes.

      Ergo, they are not able to do so.

      Could it happen? Sure.
      Could any data store be hacked and stolen? Yes
      Is Google less secure than any other of the thousands of data stores that contain your personal data? You decide (hint: no).

    12. Re:Take Marissa's advice by lgw · · Score: 1

      Ergo, they are not able to do so.

      Could it happen? Sure.

      You contradict yourself.

      They are certainly able to as they have more guns than Google. That's how you do threat modeling. They currently choose not to (perhaps because thNSA already has all the data? Hard to know.)

      If we keep the sort of government we don't have to fear, then all is good. But if the government goes full totalitarian (and we're really not that far off), suddenly everything changes.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    13. Re:Take Marissa's advice by Calydor · · Score: 4, Insightful

      Thirded.

      Had GMail since it was invite-only, and yes - Google will scan your email for advertisement, but if all you use it for is forum updates, Slashdot notifications, signing up for games etc., then what are you honestly afraid they'll find?

      I know this borders on the whole "If you have nothing to hide" mentality, but seriously, it's email. If you're sending sensitive information, use a different MEDIUM, not a different PROVIDER.

      --
      -=This sig has nothing to do with my comment. Move along now=-
    14. Re:Take Marissa's advice by swillden · · Score: 4, Informative

      Gmail is great in terms of reliability, spam filtering (best I've found), and features. But if you're looking for privacy, the only company that's probably worse in my mind is Facebook.

      What do you mean, specifically, by privacy?

      If you want to keep your family, friends, neighbors, etc. out of your email, then Gmail is great. Security is excellent, especially if you enable two-factor.

      If you want to keep random hackers out of your email, then Gmail is great. Security is excellent, especially if you enable two-factor.

      If you want to keep your ISP out of your email, then Gmail is great. It uses TLS connections for all client communications, and also with whatever other email servers it talks to that support it. Gmail-to-gmail communications is definitely encrypted all the time, both in transit and in storage.

      If you want to keep the FBI/Police out of your email, then Gmail is as good as any US-based email provider can be. They all have to provide data in response to proper subpoenas and warrants, and Google's lawyers scrutinize requests carefully.

      If you want to keep the NSA out of your email, then it's hard to say, but I suspect Gmail is quite good. Snowden revealed that the NSA was tapping Google's internal fiber, but Google has since moved to comprehensive point-to-point encryption. It's not completely impossible that the NSA has compromised the key management system that enables that, but it's actually pretty unlikely. I would assert that on this measure Gmail is as good as any large US-based email provider can be. Smaller ones may slide by the NSA because they're not interesting... but if they do become interesting they'll almost certainly be easier to pop than Google is.

      (As an aside: If the NSA is targeting you specifically for surveillance, as opposed to just sweeping you up in the dragnet, you should just give up on electronic communications entirely.)

      If you want to keep Google's advertising profile analytics software out of your email, then Gmail is awful. Your email will be scanned by systems that try to work out what you might be interested in buying, and this data will be correlated with web searches (if you don't have web history disabled), and data from other Google products. The resulting information will be used by Google (not by advertisers; they don't get access to the treasure trove) to show you ads for things you might want to buy, instead of things that you almost certainly don't want to buy.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    15. Re:Take Marissa's advice by Anonymous Coward · · Score: 0

      Gmail. I've had a private email server since 2003 and as mail and spam have evolved it's been a small hobby's amount of effort to keep up. Occasionally my private server will fatally munch a HTML-laden email and I'll have to ask it be resent to my gmail account, which I have had since they became available. I read both on my iphone. Mostly can't tell a difference. I prefer to send email from my personal server for my domain names in the "From:" rather than gmail. But when I have to be absolutely sure my email won't get rejected (mail server validation issues) I use gmail.

    16. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      LOL @ NSA. It's not quite as bad as all that. My biggest concern is all of the unreported or belatedly reported breaches. Supporting encryption and having a good Privacy Policy are important as well.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    17. Re:Take Marissa's advice by swillden · · Score: 1

      LOL @ NSA. It's not quite as bad as all that. My biggest concern is all of the unreported or belatedly reported breaches. Supporting encryption and having a good Privacy Policy are important as well.

      Nice to know that you're sane :-)

      Seriously, so many of these conversations end up dominated by people who are worried about government data dragnets which (though wrong, and which should be shut down via the democratic processes) really have no relevance to them.

      Based on the stated requirements, I think Gmail really is an excellent choice for you. No one is as aggressive as Google about pushing encryption everywhere, and Google's privacy policy is pretty reasonable. Yes, they'll advertise to you. Big whoop.

      I would second what someone else said, though: To keep your options open, register a domain for yourself (not free, but pretty cheap). From a security perspective, the best way to handle it is then to pay Google $50 per year (oops, not free) to host your domain mail directly. Second best is to set up a forward (many domain registrars offer this service) to Gmail... and make sure that the forwarding system supports SSMTP, to keep your email encrypted in transit. Having your own domain means that when you decide you need to move again, you can without having to go through the pain of giving everyone a new email address.

      Full disclosure: I work for Google. I think I'm able to offer a pretty unbiased analysis, though, and I try to do exactly that.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    18. Re:Take Marissa's advice by farble1670 · · Score: 1

      Could it happen? Sure.

      Sorry, let me make it clear. Can they now, legally, and without repercussions? No. Could they in the future? Of course, because it's the future and I'm not currently able to foretell it. Also, ETs might land and exterminate folks who's shopping habits indicate they've shown no interest in the movie "ET" nor the Atari video game "ET".

      If we keep the sort of government we don't have to fear, then all is good. But if the government goes full totalitarian (and we're really not that far off), suddenly everything changes.

      Nah, I'm good. Not being a narcissist, I understand that the fact that my shopping habits indicate I'm interest in teeth whitener and that I find Yoko Littner sexy aren't going to be enough to single me out for execution under the New Order.

    19. Re:Take Marissa's advice by gbjbaanb · · Score: 1

      Use Protonmail, quite like Gmail in the main but private and no ads.

    20. Re:Take Marissa's advice by Anonymous Coward · · Score: 0

      Yes! I migrated over to ProtonMail about a year ago and have absolutely no regrets. The service is fast, reliable, and secure, and they offer both free and paid-for accounts (at very reasonable prices). Also, if you're looking for a good VPN provider they should be rolling out their new ProtonVPN service in the near future.

    21. Re:Take Marissa's advice by fustakrakich · · Score: 1

      As for privacy, just try to find some from anybody that you can verify. Bet you can't...

      --
      “He’s not deformed, he’s just drunk!”
    22. Re:Take Marissa's advice by Gavagai80 · · Score: 2

      It's actually shocking how little google knows. I've made no attempt to hide anything from them, but when I check what they think my advertising preference interests are, they've got so many things absurdly wrong.

      --
      This space intentionally left blank
    23. Re:Take Marissa's advice by Sporkinum · · Score: 1

      If you want to keep Google's advertising profile analytics software out of your email, then Gmail is awful. Your email will be scanned by systems that try to work out what you might be interested in buying, and this data will be correlated with web searches (if you don't have web history disabled), and data from other Google products. The resulting information will be used by Google (not by advertisers; they don't get access to the treasure trove) to show you ads for things you might want to buy, instead of things that you almost certainly don't want to buy.

      You make some good points, and with the standard noscript and adblocking setups, this last point is pretty much moot.

      --
      "He's lost in a 'floyd hole"
    24. Re:Take Marissa's advice by networkBoy · · Score: 1

      Second best is to set up a forward (many domain registrars offer this service) to Gmail... and make sure that the forwarding system supports SSMTP, to keep your email encrypted in transit. Having your own domain means that when you decide you need to move again, you can without having to go through the pain of giving everyone a new email address.

      Full disclosure: I work for Google. I think I'm able to offer a pretty unbiased analysis, though, and I try to do exactly that.

      Exactly what I do.
      I manage my email address blacklist on my end. All emails to a particular domain go to me, unless they're blacklisted so I can give out BigBoxStore@domain.com to BigBoxStore and if I start getting spam to that address I then redir it to :blackhole: and never see mail from them again. Next time they need an email I give them BigBoxStor.spams.too.much@domain.com

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    25. Re:Take Marissa's advice by networkBoy · · Score: 1

      glad you used the NOT OR, had you used AND then we'd be left with no population at all...

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    26. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      This is helpful.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    27. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      I am not sure what you're getting at, here.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    28. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 2

      This is satire, right?

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    29. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      Couldn't help but snicker at this just a little.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    30. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      gmail have very special IMAP implementation (as gmail does not have folders on server side) which has some quirks and may not work very well with every proper IMAP clients.



      I agree that "special" is a good word to describe it.
      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    31. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      Good to know about the VPN. I already have a paid VPN sub but when renewal time comes around, I shop around.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    32. Re:Take Marissa's advice by Anonymous Coward · · Score: 0

      All this, 100%.

      And to the people who say things like "Just run your own server", STFU. Almost nobody else is going to use encryption on their email. If you need encryption, then either encrypt the payload yourself, or use some other form of messaging, and look into something like TOR for the transport if you're worried about people knowing who you're talking to.

    33. Re:Take Marissa's advice by Anonymous Coward · · Score: 0

      Gmail is shit. ProtonMail and Tutanota are better.

    34. Re:Take Marissa's advice by lgw · · Score: 2

      The sad thing is, Stalin's regime shows that just about anything can be deemed after the fact to be anti-social and grounds for execution. The less there is on record about me, the better, even if the government never cares about me specifically.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    35. Re:Take Marissa's advice by mjwx · · Score: 2

      Thirded.

      Had GMail since it was invite-only, and yes - Google will scan your email for advertisement, but if all you use it for is forum updates, Slashdot notifications, signing up for games etc., then what are you honestly afraid they'll find?

      I know this borders on the whole "If you have nothing to hide" mentality, but seriously, it's email. If you're sending sensitive information, use a different MEDIUM, not a different PROVIDER.

      I'm not worried about Google, they're the only free mail service that gives you a reasonable assurance that the data they sell is anonymised (I don't trust any mail provider not to be selling my data unless I control it). For anyone who I think is going to abuse my email, they get a hotmail address I've had since 1998. Nothing but spam or pron site password resets go there now. I have got a 4 letter hotmail address.

      The biggest problem with GMail is that its nigh upon impossible to get a unique address now (one of the reasons MS changed Hotmail to Live.com then Outlook.com). If you want anything resembling your name it's going to be contorted with numbers, dashes, dots and special characters. I got my Gmail account in 2005, so I've got (firstinital)(lastname)@gmail.com but I'll never get anything like that now even with my rare surname.

      If you want something that's not Frank.Avelone1987-2_b52-no-really-its-Frank@gmail.com or to keep an iron-fisted, paranoid control over your data, you need to run your own mail server.

      That being said, I'm surprised people are still using Yahoo! for anything that matters. The last Y! hold out I knew gave up in 2009 and just started using Gmail. Even then he struggled to get his very uncommon name @gmail.com.

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
    36. Re:Take Marissa's advice by CronoCloud · · Score: 1

      Oh? While I know Gmail over IMAP with a real e-mail client isn't perfect, it's much better than using a web browser and there a plenty of e-mail clients to choose from. I currently use Claws-mail, but I've used sylpheed, Thunderbird (even going back to the Minotaur days), and Kmail.

      On mobile I use k9 mail.

    37. Re:Take Marissa's advice by Anonymous Coward · · Score: 0

      Wrong. There are other options out there now. I use ProtonMail which does not read your emails.

      It's setup just like a regular email provider and free. There are premium accounts which come with more features but I've never needed them. ProtonMail cannot access your emails, so you cannot search by keyword in the contents of an email.

      I'm curious, why does this data collection by Gmail NOT bother you?

    38. Re: Take Marissa's advice by Anonymous Coward · · Score: 0

      That might be the nice reason they gave but the real reason why they changed hotmail is because of the god awful poor reputation it had by 2005 for spam. Its the same reason why they changed the name of internet explorer and they dont advertise the microsoft brand name prominantly on their xbox console and console boxes. Even their email program (outlook express) has gone through a dozen odd name changes because of its poor reputation.

    39. Re: Take Marissa's advice by mjwx · · Score: 1

      That might be the nice reason they gave but the real reason why they changed hotmail is because of the god awful poor reputation it had by 2005 for spam. Its the same reason why they changed the name of internet explorer and they dont advertise the microsoft brand name prominantly on their xbox console and console boxes. Even their email program (outlook express) has gone through a dozen odd name changes because of its poor reputation.

      Hence I said "one of the reasons". Also, Live.com didn't have the same problem, that was a marketing "harmonisation".

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
    40. Re:Take Marissa's advice by 914 · · Score: 1

      sneakemail.com has an excellent service for exactly this.

      They auto-generate unique email addresses which can be used bi-directionally, without ever exposing your 'real' address.

      It's very useful for your BigBoxStore@domain.com example, and once abuse on the address begins you can blackhole it, set to auto-reject or your choice of return error.

      Also, you don't have to setup the addresses individually. You create a code like "nwb123" and then simply use an address like Bigboxstore-nwb123@sneakemail.com as your signup address. The confirmation will come through to your regular email, and so will password resets etc.

      I like this system since it becomes obvious when (and by whom) my email address is sold or stolen. Delta.com hasn't produced a spam email yet in--- like ten years?

      source: i use and pay the modest cost for the sneakemail service. love it

    41. Re:Take Marissa's advice by Darinbob · · Score: 1

      AT&T uses it as the webmail service for its customers.

    42. Re: Take Marissa's advice by Anonymous Coward · · Score: 0

      Games for windows live did a great job at ruining the live branding.

    43. Re:Take Marissa's advice by Anonymous Coward · · Score: 0

      gmail is great if you like having everything read by an AI, and various details monetized via advertising.

      I switched to iCloud, and pay for the 50GB option - which made sense because I've ended up with iDevices mostly. In terms of security iCloud and iDevices are pretty well up there.

      And yes I get it, not everyone likes Apple, and I'm not asking anyone to. Look at whats around and make your own mind up.

    44. Re:Take Marissa's advice by sydbarrett74 · · Score: 1

      ProtonMail is a good option for individuals. Unfortunately, they don't yet have offerings that are suitable for business/enterprise users. They have promised to add additional service tiers in future, however.

      --
      'He who has to break a thing to find out what it is, has left the path of wisdom.' -- Gandalf to Saruman
    45. Re:Take Marissa's advice by gustygolf · · Score: 1

      If you want to not hand over your phone number to Google, then GMail is...

      (The damn thing keeps bugging me to add one.)

      --
      "Slow Down Cowboy! It's been 58 minutes since you last successfully posted a comment" -- slashdot, driving users away.
    46. Re:Take Marissa's advice by schleimkeim · · Score: 1

      Facebook worse than google in terms of privacy? Oh boy...

    47. Re: Take Marissa's advice by Anonymous Coward · · Score: 0

      Your seem to think that the "dot" makes difference. It doesn't. Variations such as a.bc and ab.c are delivered to the abc mailbox. That'sâ an internet standard though some services fail to implement it.

    48. Re:Take Marissa's advice by swillden · · Score: 2

      If you want to not hand over your phone number to Google, then GMail is...

      (The damn thing keeps bugging me to add one.)

      But you don't actually have to, right?

      FWIW, the reason it wants a phone number is for a recovery method in case you lose your password. That may not be a concern for you, but it happens to huge numbers of users and when it happens it generates significant costs for Google, since other last-ditch account recovery methods all involve an employee's time.

      That said, yes, if you don't want to provide a phone number, then GMail is annoying. That issue never occurred to me, because I don't have a problem providing my phone number, so I haven't seen the nags.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    49. Re:Take Marissa's advice by swillden · · Score: 1

      Oh, I forgot to mention that "lose your password" doesn't necessarily mean "forget your password". It also happens that someone guesses your password, gets into your account, and changes it to lock you out. Having a recovery phone number allows you to retake control, change the password and lock them out.

      Do you have 2FA enabled? It wouldn't surprise me if enabling that stopped the nags, since it reduces the probability of account lockout, particularly if you log in frequently (and therefore are unlikely to forget your password).

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    50. Re:Take Marissa's advice by gustygolf · · Score: 1

      If you want to not hand over your phone number to Google, then GMail is...

      (The damn thing keeps bugging me to add one.)

      But you don't actually have to, right?

      I think that is right. I can bypass the nag, but it's still a nag on every web log-in.

      I log in via IMAPS practically all the time, so I don't see the nag often.

      Actually, I just tried logging in via HTTP and I got a "please fill in your backup e-mail or phone number" screen which I could not exit since I hadn't JS enabled, but I opened https://mail.google.com/ via the location bar and there I was, logged in.

      (I also learnt that my backup e-mail address was on a provider that shut down a decade ago...)

      What I don't know is, whether I am allowed to register a new GMail account without providing a phone number. I think it was bypassable the last time I did it (but hidden pretty well). I haven't tried in a while.

      Sorry for the rambling.

      --
      "Slow Down Cowboy! It's been 58 minutes since you last successfully posted a comment" -- slashdot, driving users away.
    51. Re: Take Marissa's advice by Anonymous Coward · · Score: 0

      Gmail isn't free, sucker. You're just not paying them in canuckaduckets.

      - AC

    52. Re:Take Marissa's advice by Anonymous Coward · · Score: 0

      Fourthed!

      Try Gmail with Thunderbird & IMAP over SSL. Very convenient, very solid. Safe to use over questionable networks. Doesn't (necessarily) tie your automated profile to your web browser.

      With GMAIL you can use the plus (+) sign in your email address, as in example+whatever@gmail.com. Gives you an infinite number of unique email addresses. You can see who's using your info from where...

      From the Gmail web-browser interface, you can redirect mail to different folders based on the +whatever part (amongst many other options). You can forward your email from all sorts of other accounts to unique folders automatically. It's very useful with Amazon, Newegg, ThinkGeek, etc. Anyone who spams you. Or old business/school email accounts.

    53. Re:Take Marissa's advice by mysidia · · Score: 2

      I'm curious, why does this data collection by Gmail NOT bother you?

      Why should it bother me? I and most people already use Google search, so they have a great many potential opportunities to collect data.

      Because my data is on their servers anyways: As far as I'm concerned Google is considered a trusted party.
      If their security practices as a company are not sound, then their E-mail servers can be compromised, and then my RAW data is out in the hands of adversaries,
        SO trust is implicit. Once trust is established, it doesn't really matter if they collect some aggregate statistics internally. Most providers do, even if their privacy policy clauses allowing the activity are more subtle.

      Yes Google collect aggregated data and build statistical models about me, then use predictions from the machine learning algorithms to decide what
      ads to display.

      But why should any of that concern me? It's data security and protection of the RAW data that could be used by hackers that is important.

      And I feel that Google's security practices are top notch ---- as a purveyor of revenue-generating services based on analysis: Google as a company knows how valuable data can be competitively, so they have more reasons than most companies to aggressively protect customers' data.

      Also; I feel I can't trust Yahoo, or some small No-Name mail provider, Because they slip under hackers' radar. What says a lot is when you have a company that is a Huge high-value target for hackers, And a history of pretty much zero security breaches.

    54. Re:Take Marissa's advice by houghi · · Score: 1

      I use my own domain with the pop from my provider. The provider is small enough that they won't wasting money to look in my emails. They will not have enough financial reason to do so.

      I run my own web interface for mail on my home webserver. So no mail server configuration.

      I have also used GMX for mail, if not for anything else, because it isn't Gmail, or Hotmail or Yahoo.

      I also am always assuming that what happens on the Internet is known. No secrets. That is easier than to assume there might be things that are and then find out they are not.

      --
      Don't fight for your country, if your country does not fight for you.
    55. Re:Take Marissa's advice by swillden · · Score: 1

      AFAIK, policy has not changed and phone number isn't required for new accounts, though I couldn't guarantee it. Another option for bypassing the nag is just to stay logged in all the time. You may also consider adding 2FA; there is a logical security reason why that might suppress the nag. I don't know if it does, though.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    56. Re:Take Marissa's advice by Reziac · · Score: 1

      This is why I only use GMail for Google-related stuff: Groups, Youtube, and the like. I figure Google already has everything they want to know about me from that anyway, so no harm done and keeps the fluff out of my other mailboxes. And I only use it via POP3 so I never have to deal with the interface.

      Otherwise...

      GMX for free-and-reliable. (Can also do POP3.) Owned by 1&1.

      I know people using Protonmail (for encrypted) and POBox.com without complaint.

      Another option is to buy your own domain and use it with mail-only hosting. IIRC, 1&1 offers that for something like $1/month. (I have my main hosting there and mostly use my domains for email anyway, and that gives me more mailboxes than I can use.)

      But if you want reliable above everything else, nothing beats Earthlink. This is why I still pay for an Earthlink dialup account (tho I no longer need the connection) -- and I've done years of CC: comparisons with multiple email hosts.

      BTW Yahoo still has that issue with email intermittently vanishing without a trace -- no error, no nothing, sometimes for months on end -- that's been an ongoing problem since at least 1998.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    57. Re:Take Marissa's advice by gustygolf · · Score: 1

      AFAIK, policy has not changed and phone number isn't required for new accounts, though I couldn't guarantee it. Another option for bypassing the nag is just to stay logged in all the time.

      Heh, my browser is set to auto-clear all cookies on close, so any 'remember-mes' don't work for long Also, I don't care for Google recording my search history so I definitely don't keep logged in if at all possible.

      You may also consider adding 2FA; there is a logical security reason why that might suppress the nag. I don't know if it does, though.

      Aaand I just read Google's page on that, and learnt that the feature requires a phone number which we're kind of trying to avoid =)

      --
      "Slow Down Cowboy! It's been 58 minutes since you last successfully posted a comment" -- slashdot, driving users away.
    58. Re:Take Marissa's advice by Anonymous Coward · · Score: 0

      GMX for free-and-reliable. (Can also do POP3.) Owned by 1&1.

      Just a reminder: you can only register for GMX.net if you're in Germany or somesuch. They have IP blocks that enforce it.

      GMX.com is the international version.

    59. Re: Take Marissa's advice by Anonymous Coward · · Score: 0

      I have Yahoo!'s poaid with no ads, more blocked email addresses and email aliases. This has worked out well for me.

      I did set up similar accounts on gmail.com. I can relatively easily filter the needed emails/accounts and change from Y! To gmail.

      Yahoo! And gmail use your emails for their $$-making putposes.

    60. Re:Take Marissa's advice by swillden · · Score: 1

      You may also consider adding 2FA; there is a logical security reason why that might suppress the nag. I don't know if it does, though.

      Aaand I just read Google's page on that, and learnt that the feature requires a phone number which we're kind of trying to avoid =)

      That's only if you use SMS as the 2FA method. Use the Authenticator app instead. Or a security token (e.g. Yubikey nano).

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    61. Re:Take Marissa's advice by cthulhu11 · · Score: 1

      If you want to use OSX Mail.app, then Gmail is a crapshoot.

    62. Re:Take Marissa's advice by swillden · · Score: 1

      Why is that? Does Mail.app not support IMAP4 properly?

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    63. Re:Take Marissa's advice by q4Fry · · Score: 1

      One can't add an arbitrary 2FA scheme to Google without a phone number. Is this because Google doesn't trust me to keep track of my actual 2FA setup and wants to give me a recovery option? Or do they just want my phone number?

      I would love to be mistaken. If there's a way to get around this, please let me know.

    64. Re:Take Marissa's advice by swillden · · Score: 1

      One can't add an arbitrary 2FA scheme to Google without a phone number.

      Hmm. It used to be possible. Maybe it's not any more.

      Is this because Google doesn't trust me to keep track of my actual 2FA setup and wants to give me a recovery option?

      If you really can't do it without a phone number, that's probably part of the reason. I mean, if you use the Authenticator app and then drop your phone in the toilet you will lose access to your account. You can (and should!) print out recovery codes, and store them safely, but if they and your phone are in your house and it burns down...

      Personally, I have a couple of security keys as my primary 2FA methods, plus the Authenticator app on my phone, plus two backup phone numbers (mine and my wife's), and recovery codes printed and stored in two places (one in the safe in my house and one in my dad's safe at his house). You may required less redundancy :-)

      Anyway, I tried to test setting up 2FA without a phone number myself, and couldn't. I don't have any gmail accounts that don't already have a phone number (and don't already have 2FA), so I tried to create a new one... and it looks like it's now impossible to create a new gmail account without entering a phone number. Thinking about it, I suspect that's an anti-abuse measure.

      Last year, the Google abuse team reached out to me to ask me to add some features to Android that they can use to limit the ability of people to use Android devices to create large numbers of gmail accounts. They explained that people creating and selling thousands of gmail accounts to fraudsters is a big problem, both for the fraud and the blowback on Google that it creates. I don't know but suspect that they probably imposed the requirement that all new accounts verify a phone number (well, probably all new accounts in geographies where it's reasonable to do so) as one way to limit mass account creation.

      The same logic doesn't apply to already-existing accounts, but the presence of a verified phone number may be a signal in other abuse- and security-related decision processes, since it's a moderate indicator that the account owner is a real person.

      Or do they just want my phone number?

      What would they do with your phone number? They're not going to call you.

      If there's a way to get around this, please let me know.

      Well, you could give them someone else's phone number :-)

      Actually, in all seriousness, if you're worried about the number being used to correlate data with some other source, why not confound it by using a number of someone who is not you and with whom you don't have a particular relationship? Use a payphone, if you can find one. Then after you've set up your preferred 2FA (and printed out some recovery codes to keep in a safe place), remove the number from the account so it can't be used as a 2FA.

      I was able to remove the phone number from one of my accounts. Then when I signed in from an Incognito window (using 2FA), I was able to log into gmail without any nag about adding a phone number, so I suspect that approach works.

      Honestly, though, I'd recommend using your real phone number and leaving it on there as an account recovery option.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  2. Run your own by Z00L00K · · Score: 5, Insightful

    Run your own mail server, that's the only way you can be reasonably sure that you have control over your mail.

    --
    If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    1. Re:Run your own by Anonymous Coward · · Score: 5, Funny

      Run your own mail server, that's the only way you can be reasonably sure that you have control over your mail.

      I second what Hillary says.

      (Is it a stretch to mention the captcha is 'dwelling', as in run your own server in your dwelling?)

    2. Re: Run your own by Anonymous Coward · · Score: 4, Informative

      "Sure?"

      Running a good, reliable mail server yourself is hard to do well. Doing good spam filtering is harder. Being secure/hackproof, harder still.

      Running your own server if you're an amateur is a terrible idea.

      Sure, you COULD spend a huge amount of time learning how to do this well, and a lot of time keeping up with patches an maintainence. But it's likely the highest cost option if you value your time at all.

    3. Re:Run your own by unixisc · · Score: 1

      Of course. Everybody is a whiz at Sendmail, Dovecot and the like. But it sure beats having your email in 'the cloud'!

    4. Re:Run your own by Anonymous Coward · · Score: 0

      I agree.

      Buy a domain, buy hosting.
      Manage your own.

      You know you won't need to change email address again.

      I have hosting from hasweb (they don't do new accounts) which uses cpanel interface.
      Very easy to manage, add email accounts, setup filtering etc.
      Webmail is included. not as fancy as gmail or yahoo but sufficient; i usually use the mail in IMAP with outlook on windows or aquamail on android.

    5. Re:Run your own by Anonymous Coward · · Score: 0

      Of course. Everybody is a whiz at Sendmail, Dovecot and the like. But it sure beats having your email in 'the cloud'!

      Do people still use Sendmail? I thought Postfix had pretty much replaced Sendmail everywhere.

    6. Re:Run your own by Anonymous Coward · · Score: 0

      You're still using the cloud? You should try the river, it's so much better.

    7. Re:Run your own by captaindomon · · Score: 1

      Running your own server doesn't ensure you have control over your email. In fact, unless you have hired, 24x7 technicians you trust, and are running it in a hardened data center you built yourself, etc. you probably have more leaks to your server to bad actors than you do using one of the big providers.

      --
      Just because I can hook a shark from a boat, I do no offer to wrestle it in the water.
    8. Re: Run your own by gbjbaanb · · Score: 1

      Nothing is hackproof but running your own email server is a sensible option if you're half way competent. Just remember to make backups.

      Arstechnica had a series on how to do it and why they chose the options they did. Quite informative:

      https://arstechnica.com/inform...

    9. Re:Run your own by Anonymous Coward · · Score: 0

      +1

      I have a small rack in my garage. It's the most secure thing I have because it's off. I know security folks over at Google and they're pretty good. Running my own mail server would not necessarily be more _secure_ then using gmail. It may have fewer robots scanning it for keywords and would, therefore, make me _feel_ more private but that's making a lot of assumptions.

      If you want security and privacy in your email, encrypt at the client and use whatever the hell mail service you want. Your mom/dad/sister/partner/friends/business associates/vendors/etc know how to use public key cryptography, right? I think there are a couple companies doing simple gmail client side encryption and how much you trust that to a third party to handle keys is up to you.

    10. Re:Run your own by ma1wrbu5tr · · Score: 1

      LOL. I thought the same thing.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    11. Re: Run your own by KGIII · · Score: 1

      Hmm...

      Do you know how easy it is to maintain a Linux box? It's pretty easy. As in, open terminal, press up arrow, press enter, type password, press enter, press Y, press enter, done.

      You don't defrag. You don't clean a registry. You don't use antivirus. Your whole system is updated, with just that. You just press up until you get the update command from the last time you used it. It's not magic. It's not hard. Unless you're deliberately difficult, it'll update the whole damned system for you.

      Hell, here... For the most common...

      sudo apt-get upgrade

      (No, it really is upgrade, not update. Update does something else. When you enter your password, nothing will show on the screen - not even asterisks. This is the expected behavior.)

      Tada!

      --
      "So long and thanks for all the fish."
    12. Re: Run your own by manu0601 · · Score: 1

      Doing good spam filtering is harder.

      For small to average sites, Greylisting is very effective at removing spam.

      The fact that it does not scales well to huge sites is probably why spammers do not spend much work fighting it

    13. Re: Run your own by robot5x · · Score: 1

      I did exactly this recently. Swapped ~10yrs worth of gmail for a digital ocean droplet at $10/month, and now have a well-functioning email service I can get on desktop and phone and has been really easy to maintain after setup.

      Despite being a competent linux user there is some pretty arcane shit required in setting up postfix etc, and it took me a LONG time to nut it out. I started with the arstechnica piece quoted above but this was easily the most useful guide I came across (my VPS is debian 8).

      --
      Hej! Nasi tu byli!
    14. Re: Run your own by schleimkeim · · Score: 1

      What do you even do on a tech news site? "Aww it's too hard. You shouldn't even try it. waaah waaah". People like you are the reason this whole industry is going to shit.

    15. Re:Run your own by thegarbz · · Score: 1

      I run my own mail server. I find that in general I give up a lot of control over the ability for my emails to reach their intended target. Seriously it's about the most painful thing on the internet, between entire ISPs blacklisted, domain black listing, keeping up with the requirements to stay off black lists etc.

    16. Re: Run your own by Anonymous Coward · · Score: 0

      Haven't done it myself. I keep hearingâ complaints from admins that their mail is rejected by others servers because of overly aggressive policies to prevent spam.

    17. Re:Run your own by x_t0ken_407 · · Score: 1

      I second this. I still have a GMail account (unfortunately), however everything I can help goes to my private email server (FreeBSD/postfix/Maia ftw).

  3. None by 110010001000 · · Score: 5, Insightful

    People are REALLY going to hate this, but there is no 100% secure network service. Computer networks were designed for sharing information between nodes. The idea of keeping others out of that sharing was added on later. On a large interconnected network like the Internet it is impossible to do 100%. I can feel the nerd rage boiling here and the claims that "you don't know what you are talking about!". But save it. Reality tells us otherwise. If it is on a network, it isn't secure.

    1. Re:None by Anonymous Coward · · Score: 0

      He asked "What paid or free secure email service do you recommend as a replacement and why?"

      Your answer is 100% non-responsive and answers a question which was not asked. Agenda much?

    2. Re:None by Drethon · · Score: 1

      People are REALLY going to hate this, but there is no 100% secure network service. Computer networks were designed for sharing information between nodes. The idea of keeping others out of that sharing was added on later. On a large interconnected network like the Internet it is impossible to do 100%. I can feel the nerd rage boiling here and the claims that "you don't know what you are talking about!". But save it. Reality tells us otherwise. If it is on a network, it isn't secure.

      This, the only truly secure network device has been disconnected form the network. The most secure network devices make it very difficult for the authorized user to access the system and extremely difficult for anyone else to access. Just about everything a network device does to make it easier to access and use just makes it less secure.

    3. Re:None by 110010001000 · · Score: 1

      It is completely relevant. I don't recommend any paid or free secure email service because there isn't any.

    4. Re: None by Anonymous Coward · · Score: 0

      So...you're recommendation is not to use email, because no provider is worthy? Or, if that's NOT what your saying, what IS your recommendation? Or, if you're just trying to contribute to a consideration if options, how do you feel the opinion "nobody does it well" advances the consideration of options?

    5. Re:None by WillAffleckUW · · Score: 1

      This is a correct statement. Even non-networked airgap isn't secure.

      But we have to work for it then.

      --
      -- Tigger warning: This post may contain tiggers! --
    6. Re: None by 110010001000 · · Score: 0

      No, apparently you cant read. The question was "What paid or free secure email service do you recommend as a replacement and why". I answered it. If they had asked "What paid or free email service do you recommend as a replacement and why" I would have answered differently. Use Gmail. It isn't secure but it is free and easy to use.

    7. Re:None by headhot · · Score: 1

      Google has been pretty good about discussing compromises and offering a host of 2FA techniques. Google is in no means 100% transparent, but after the Chinese hacking attack on dissidence, and the Snowden stuff, Google has stepped up on security options and access notifications.

    8. Re: None by Anonymous Coward · · Score: 0

      No, I think that OP is commenting on the term 'Secure'

      It is a valid point and/or a poorly explained requirement

      There is literally NO secure communications over the internet, unless you have exchanged one-time pads with the other side and follow extremely careful protocols

      Maybe YOU need to define what you believe to be "secure enough" to get a more usable answer

    9. Re:None by JustAnotherOldGuy · · Score: 1

      People are REALLY going to hate this, but there is no 100% secure network service.

      For once, Binary Bro is correct. (Statistically it had to happen sooner or later.)

      But it's true: there is no 100% secure network service, no matter whether you use an established provider like GMail or run your own private domain mail service.

      --
      Just cruising through this digital world at 33 1/3 rpm...
    10. Re:None by JustAnotherOldGuy · · Score: 1

      This, the only truly secure network device has been disconnected form the network.

      True, but that kinda rules out email as a thing.

      --
      Just cruising through this digital world at 33 1/3 rpm...
    11. Re:None by Anonymous Coward · · Score: 0

      2FA is only an excuse to get your phone number, and Google uses it as a primary key to link you to other 2FA "secure services". Stop being so naive.

    12. Re:None by 110010001000 · · Score: 2

      Google is reading and scanning all your email. Give me a break.

    13. Re:None by 110010001000 · · Score: 1

      Wrong. I am always 100% correct. You must be thinking of my brother, 110011001000

    14. Re:None by trg83 · · Score: 1

      Yes, but they hate competition in doing so, so they try pretty hard to secure it from all other parties!

    15. Re:None by farble1670 · · Score: 1

      Google is reading and scanning all your email. Give me a break.

      Obviously if the author is coming from Y! Mail, this isn't their concern. They are asking about security from 3rd parties. So yes, contrary to your snide remark, discussions about 2FA and security notifications are relevant here.

    16. Re:None by Anonymous Coward · · Score: 0

      You had me until "Reality tells us otherwise"

    17. Re:None by Anonymous Coward · · Score: 0

      you can tell that your brother is evil (lt 100% correct) because he has a "soul patch"

    18. Re:None by infolation · · Score: 1

      This, the only truly secure network device has been disconnected form the network.

      Data can be exfiltrated with fan noise, blinking lights, leaked radio emissions, thermal pings. Even loud ultrasonic noise that's picked up from windows with laser-mics. Even a switched off computer (via Intel ME)

      After reading about these marvels of human ingenuity, there doesn't seem to be a way of protecting computers under any circumstances. Just live in a desert and grow chickens or something.

    19. Re:None by Drethon · · Score: 1

      Good points, at this rate it probably wont be long before technology just reads your thoughts from hundreds of miles away...

    20. Re:None by Drethon · · Score: 1

      This, the only truly secure network device has been disconnected form the network.

      True, but that kinda rules out email as a thing.

      Well you can move data on external drives, but now your security is open to viruses so...

    21. Re:None by Anonymous Coward · · Score: 0

      You're taking secure as an absolute when it's really relative to the threat. My Amazon purchases are 100% secure in the sense that I always get them, and I never ever pay for YOUR purchases, and when something goes wrong, Amazon fixes it. Even when they breach my account and lose the credit card, I am secure. I've never ever paid any money out for a CC breach, and none of the goods or services purchased have ever been revoked or magically vanished. So my goods and services are secure, my money is secure. The rest is just fluff.

    22. Re: None by KGIII · · Score: 1

      Right? She just leaks NSA data.

      --
      "So long and thanks for all the fish."
    23. Re:None by ma1wrbu5tr · · Score: 1

      Yes. I get this. But there are steps one can take to limit security risks. Having an email provider that gets hacked and doesn't tell you isn't one of them.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    24. Re:None by Anonymous Coward · · Score: 0

      sweet college freshman level insight bro, great to know the world isn't one of absolutes like humans tend to think. What's next? Race is a social construct? Maybe there's a relation between the structure of galaxies and atoms and we're like, just part of giant being, dude?

      So, just for you, you special pedant, you, from now on, change out "security" or "secure" to "reasonable security" or "reasonably secure."

      Sorry to troll, but I'm so tired of the 30 year old insights being recycled on this GD site as if they are contributions to the discussion.

    25. Re:None by JustAnotherOldGuy · · Score: 1

      Well you can move data on external drives, but now your security is open to viruses so...

      Plus it sort of negates the utility of email itself.

      Truly sometimes all we have are bad choices, and we just have to pick the least-worst one that we can.

      Frankly my life is so drama-free and law abiding that I'd be downright flattered if anyone wanted to root around in my emails. It'd be like taking Ambien in a text format.

      --
      Just cruising through this digital world at 33 1/3 rpm...
  4. Don't Match by ZiakII · · Score: 5, Insightful

    has a good Privacy Policy and free

    Don't match in my experience.

    1. Re:Don't Match by Anonymous Coward · · Score: 0

      has a good Privacy Policy and free

      Don't match in my experience.

      To be fair they did say Paid OR free.https://ask.slashdot.org/story/17/06/15/1749251/ask-slashdot-advice-for-a-yahoo-mail-refugee#

  5. NOT Gmail! by Anonymous Coward · · Score: 0

    Given what you are looking for, Gmail would not be a good choice!

  6. Email the wrong tool for privacy by DickBreath · · Score: 5, Insightful

    If you want privacy, isn't email the wrong tool? Isn't email like a post card that anyone can read in transit?

    If you want private communications, look for a different way, a private way, to communicate.

    If you want convenient email for casual use, try GMail. For example, Google will find things in your email, like confirmation emails of your upcoming flights, and then Google will be sure to remind you on your smart phone. But I don't treat communication with my airline the same as I might treat communication with other parties.

    --

    I'll see your senator, and I'll raise you two judges.
    1. Re:Email the wrong tool for privacy by tepples · · Score: 1

      If you want privacy, isn't email the wrong tool? Isn't email like a post card that anyone can read in transit?

      Mail in a PGP or S/MIME envelope can't be read in transit.

      If you want private communications, look for a different way, a private way, to communicate.

      Someone supporting a product, service, or free software project still needs some means for users to contact him. What's the private way to provide support to members of the public? A web-based issue tracker would still need email so that users can log in without a password, such as when resetting a forgotten or compromised password.

    2. Re:Email the wrong tool for privacy by Anonymous Coward · · Score: 0

      No. But insisting of getting everything for free is.

    3. Re:Email the wrong tool for privacy by Anonymous Coward · · Score: 0

      Mail in a PGP or S/MIME envelope can't be read in transit.

      No, but an e-mail exchange with a drug dealer flags you, no matter what the mail contents says.

    4. Re:Email the wrong tool for privacy by jader3rd · · Score: 1

      Isn't email like a post card that anyone can read in transit?

      Most email servers connect to each other via an encrypted channel. So the emails aren't in plain text whilst in transit.

    5. Re:Email the wrong tool for privacy by swillden · · Score: 1

      Isn't email like a post card that anyone can read in transit?

      Most email servers connect to each other via an encrypted channel. So the emails aren't in plain text whilst in transit.

      Unfortunately it's really not "most email servers", but only "some email servers". Most all of the big ones do use SSMTP, though, so most email is transferred via an encrypted channel.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    6. Re:Email the wrong tool for privacy by Anonymous Coward · · Score: 0

      in theory, 'everything' in a communication stream is 'encrypted', even if that only means it was converted to ascii or ebcidic

      Why would you think that something using https, ssl, ssmtp or pgp 'encryption' cannot be read just as easily?

    7. Re:Email the wrong tool for privacy by tepples · · Score: 1

      an e-mail exchange with a drug dealer flags you

      Flags me as what? A valued Walgreens customer?

  7. I'm just staying with Yahoo mail by jfdavis668 · · Score: 1

    I haven't had any issues. Unless they make major changes, I see no reason to move on.

    1. Re:I'm just staying with Yahoo mail by DickBreath · · Score: 2

      Same here. I won't be closing my hundreds of email accounts on Yahoo. I haven't used them in a decade. I see no reason to change them, close them, move them, or take any action whatsoever.

      When the big Yahoo email breach occurred, how many people had the following questions?
      1. I wonder how many of my email accounts (that I haven't used in years) are affected?
      2. I wonder what percent of the breached accounts are my email accounts that I haven't used in years?

      --

      I'll see your senator, and I'll raise you two judges.
    2. Re:I'm just staying with Yahoo mail by rmdingler · · Score: 1
      ATT/Yahoo email account.

      It should be interesting, if nothing else, since the new Overlord is an ATT competitor, and Verizon has been recently in the news shuttering up their own email activities.

      --
      Happiness in intelligent people is the rarest thing I know.

      Ernest Hemingway

    3. Re:I'm just staying with Yahoo mail by jfdavis668 · · Score: 1

      Yes, Verizon is moving their email accounts onto AOL servers.

    4. Re: I'm just staying with Yahoo mail by KGIII · · Score: 1

      I gotta ask.

      Hundreds?

      --
      "So long and thanks for all the fish."
    5. Re: I'm just staying with Yahoo mail by DickBreath · · Score: 1

      Yes. Really.

      Back in the day, there was no verification needed to create a Y! account. You certainly did not need a phone number.

      So you can imagine that the process could be scripted. Not that I'm suggesting that anyone would have ever done such a thing. Nosiree.

      Back in the day, when laughing at trolls on Y! SCOX message board, one could use a script that could use many accounts to vote down troll comments, effectively nuking them.

      Furthermore, you did not even need an HTTP POST operation to cause a downvote. Just a GET operation with all necessary parameters in the URL. And the right cookies to be "logged in" on an account that would be voting on the message.

      I'm not saying anyone would actually do such a thing. Definitely not. I'm just saying it would have been possible.

      Another bit of trivia from back when Yahoo had stock message boards. Sometimes Yahoo would delete an entire troll thread. If you knew the HTTP POST parameters for a normal reply to a message, you could reply to a specific message on a deleted thread topic. People could carry on conversations invisibly for months or even years on one thread. None of this would show up on the main forum page. Just sayin'. But I can't say that I know of anyone who would engage in such behavior.

      --

      I'll see your senator, and I'll raise you two judges.
    6. Re: I'm just staying with Yahoo mail by DickBreath · · Score: 1

      A minor correction. The replies WOULD show up on the main forum. But you couldn't read them by clicking on the link to the newly posted message. The only way to read the message was to know how to HTTP GET a page that was the equivalent of hitting the REPLY button. But you couldn't hit the reply button unless you could read the message. But if you knew the message ID from the link, and you knew how to mechanically form the URL for the reply button, you could get back the reply page, with the original message quoted, and a box to type in your reply. Sorry for not describing it correctly above. It was just so long ago. The Tardkopf thread went on for a very long time. It might have been more than a year. Possibly longer. It was amusing that people would talk about how there were replies to this deleted topic. But nobody could read them by clicking the links.

      But again, I can't imagine that anyone who would take advantage of how unbelievably poorly Yahoo's message forums were shoddily constructed.

      --

      I'll see your senator, and I'll raise you two judges.
  8. Sad to go, But I'll be joining you by Anonymous Coward · · Score: 0

    I have years of emails, going back to the 90's. Including many people who are no longer with us. I don't wish to lose all those emails. and contacts.

    I awaut the replies of others.

    1. Re:Sad to go, But I'll be joining you by slaker · · Score: 1

      It's fairly trivial to export your messages. You can copy them someplace local via any IMAP client. Contacts from Yahoo aren't bad either, since it'll make a .CSV for you. Putting the messages back on another service isn't horrible once you have those things under your own control.

      --
      -- I wanna decide who lives and who dies - Crow T. Robot, MST3K
    2. Re:Sad to go, But I'll be joining you by Anonymous Coward · · Score: 0

      Here's my reply: You're insane. A digital hoarder. Get rid of this spiritual weight you're dragging everywhere.

    3. Re:Sad to go, But I'll be joining you by unixisc · · Score: 1

      I too had that, and using Thunderbird, I moved all the folders I wanted into other accounts. One thing I forgot - to move my Financial folder into one of the other accounts, and lost everything there. Fortunately, I was able to retrieve the email of my tax preparer, so the damage was not irreversible. But this is what I'd suggest: use Thunderbird to host your yahoo! as well as your other accounts (you do have >1 email account, don't you?), and then move all the emails that are not worth deleting to that one. If you had a policy of putting them in folders, that's even better.

      I have something like 7 email accounts for different things. One thing - I always access the emails via Fossamail in Windows or Thunderbird in TrueOS (since Fossamail doesn't have a FreeBSD port the last I checked). That way, I don't get peppered w/ ads or popups. I do have an incredible amount of spam, which was a leading reason that I closed my yahoo account. Gmail, AOL (I have a netscape.net account from the 90s) and Microsoft (both live.com & hotmail) are nowhere near as bad.

    4. Re:Sad to go, But I'll be joining you by ma1wrbu5tr · · Score: 1

      I moved everything relevant to the Inbox folder, marked it as unread, and set my pop client to download to my PC. Next step is working on exporting my contacts list.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    5. Re:Sad to go, But I'll be joining you by ma1wrbu5tr · · Score: 1

      Thunderbird was my first stop on this adventure. Thanks for replying. (Can you believe all the people suggesting gmail?)

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    6. Re:Sad to go, But I'll be joining you by unixisc · · Score: 1

      If you successfully move all your emails to the newer account using Thunderbird, it won't be that difficult to retrieve the contacts. Aside from gmail, one more thing I might suggest - outlook.com. In which case, in Windows, you can use that account to log in, and the People app will automatically mine your contacts for you. If you then use either Thunderbird or Windows Mail, you won't have to see their ads.

  9. Well this is awkward by Anonymous Coward · · Score: 1

    If you are trusting someone else to manage your email, you will never be sure someone isn't reading your emails. Simple as that. I'd go with Google since they are at least open about what they do with your emails. Or at least as far as I know.... which is all you can say about any free or paid service.

    Now setting up your own email service isn't all that terribly hard. If you really care about your security, that is the way you will go. Otherwise, you just figure out who you distrust the least.

    1. Re: Well this is awkward by Anonymous Coward · · Score: 0

      If you're using email, you'll never be sure someone isn't reading your emails.

      FTFY

  10. Fastmail by ebonum · · Score: 5, Insightful

    Not free, but it works well. Note: Servers are in NY.

    1. Re:Fastmail by Anonymous Coward · · Score: 1

      Not free, but it works well. Note: Servers are in NY.

      anything american owned and hosted in america is compromised by default

    2. Re:Fastmail by thevirtualcat · · Score: 1

      I second this.

    3. Re: Fastmail by Anonymous Coward · · Score: 0

      (and Google's Android is now Auto-correcting Fastmail.com to two words)

    4. Re:Fastmail by ma1wrbu5tr · · Score: 1

      Thanks for replying. I will check them out.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    5. Re: Fastmail by Anonymous Coward · · Score: 0

      Same. $5 a month and I can use my own domain. It's fast, it's secure and the are no ads.

      I like being able to use wildcards in the domain of my emails. So I can sign up for random website with user@randomwebsite.domain.com
      If I start getting spam at that address I know who is to blame and I can just block the address to stop the spam.

    6. Re:Fastmail by Anonymous Coward · · Score: 0

      I third this. Been a FM user since it was started and they had a lot of Perl on the backend. They were one of the best, early IMAP providers. Very much worth the $19.99/yr I pay.

    7. Re:Fastmail by Anonymous Coward · · Score: 0

      Yes, FastMail is fantastic and I have been a happy paying customer for years and I definitely recommend checking them out.

      (I have however dumped FastMail for my own use because they are turning off their plain HTML webmail at the end this month.)

    8. Re: Fastmail by Anonymous Coward · · Score: 0

      Me too. Moving from my own kolab server to fastmail was such a relief. Messages don't get rejected as spam. Reasonable pricing. Tons of features you don't get woth the big providers - file hosting, contacts, cals, notes work seamlessly across devices. Running your own mailserver is fun, but not if your business critical messages get bounced.

      I would also check out kolab.net if your main goal is freedom without having to run your own mail server but want to support software/service freedom

    9. Re:Fastmail by Anonymous Coward · · Score: 0

      3rd.

    10. Re:Fastmail by Anonymous Coward · · Score: 0

      I third this!

  11. Unseen.is - Encrypted e-mail by SilverSlimer · · Score: 1

    Don't bother with any free service which will basically allow for the always respectful, honourable, "authorities" to check your e-mail whenever they feel like it. Use encrypted e-mail through www.unseen.is.

  12. And you were with Yahoo?!?! by Anonymous Coward · · Score: 0

    If those are things you want in an email service, why were you with Yahoo to begin with?

    1. Re:And you were with Yahoo?!?! by green1 · · Score: 2

      I think this is really the important bit.

      The OP obviously is looking for an email service that is completely different from the one they are migrating from, however expect that it will exist, and probably want it for approximately the same cost (near zero)

      I think this may be asking too much.

      For a good alternative to Yahoo mail, you could use Gmail, it has all of the same security issues as Yahoo but I don't think it is in any way worse (and arguably I do trust google more than I trust yahoo, though that doesn't say much) and gmail, simply due to it's popularity, does have a lot of functionality (either native, or third party) so there is that.
      Google also doesn't have much of a history of data breaches, and they seem to allow no more government snooping than any other company (which again doesn't say much)

    2. Re:And you were with Yahoo?!?! by unixisc · · Score: 4, Insightful

      B'cos years ago, Yahoo! was a pretty respectable company, and had loads of good stuff associated, like geocities and yahoo chat! If I recall right, it was even there ahead of Google, and were a pretty good bet when Netscape was floundering. My first webmail account was Netscape.net (under Netscape 4), then yahoo & hotmail.

      Things changed, & went downhill once Google pioneered the concept of monetizing everything on the internet - be it email, web pages and so on. The biggest evidence of that is the way MICROSOFT has changed - from a pure software company (plus some hardware) to a Google wannabe.

    3. Re:And you were with Yahoo?!?! by ma1wrbu5tr · · Score: 1

      As stated in the post, I'm willing to pay. Just not sure which service to use.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    4. Re:And you were with Yahoo?!?! by Anonymous Coward · · Score: 0

      I really like your use of the term "pioneered" rather than "discovered". Monetizing the Internet was not only inevitable (as well as obvious), but I'd argue surprisingly delayed. TANSTAAFL. It'd be interesting to compare the traffic for the sites which have been in existence for, say 10 or 15 years between self-supported sites and those who "monetize". (Here, by "self-supporting", I mean "free"). The herd's demand for free Internet, is not conceptually different than their demand for free child care, free health care, free disability care, free education, free safety services, free government, etc. (How many 10 year old sites are "free" - and supported only by the creator/maintainer? It is enormously demanding year after year, few can manage it. Those that do deserve some sort of Citizen Service award (if they actually have traffic).

  13. Try Proton Mail by Lord_Rion · · Score: 1

    ProtonMail out of Switzerland is pretty good and seems to be pretty secure.

    https://protonmail.com/

    --
    --Hired Net Grunt
    1. Re:Try Proton Mail by ma1wrbu5tr · · Score: 1

      Proton, Hushmail, and a couple others have made the short list. Thanks for reading and replying.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    2. Re: Try Proton Mail by Anonymous Coward · · Score: 0

      I just came here to make this point, but since it's already been made, I'll just second it.

    3. Re:Try Proton Mail by thebes · · Score: 1

      Surprised it took this long in the discussion to come up. +1

    4. Re: Try Proton Mail by Anonymous Coward · · Score: 0

      I would add runbox.com to the list. Offshore, strong privacy, no logging, and less than $20/yr for multiple accounts. I mailed them a $20 bill and connect via VPN.

      I agree with others that nothing is 100%, my goal now is to make it more trouble than it's worth to build a "profile" (makes me sick) on me. But hey, I have nothing to hide other than my belief in the American ideals of freedom, distrust of the government, my right to privacy, and pursuit of happiness. Good luck.

  14. Until Email transport security gets better.... by Anonymous Coward · · Score: 0

    It's like putting your possessions into a strongbox, and sending them by carrier pigeon to another strongbox. All you can do is try to verify where the pigeon has been.

    I use Gmail. Is something more secure? Probably. I'm interested in other people's answers here too.

    1. Re:Until Email transport security gets better.... by PPH · · Score: 1

      Never mind the transport. That will always be compromised. Depend on the security of the strongbox. Understand the motivations of the developer (spyware, compromised by the NSA, Chinese or both) and issues related to secure key exchange.

      --
      Have gnu, will travel.
    2. Re:Until Email transport security gets better.... by Anonymous Coward · · Score: 0

      In a way, you have that backward. With SSL/TLS, the transport is moderately well-secured unless you have somebody who's really after you and willing to set up a MITM. However, the major email providers all keep the server stuff in clear text. So unless you use end-to-end encryption like PGP all the stuff that's sitting on the server is wide open for inspection and mining. The email providers don't need to do MITM - it's all right there on their servers for the taking. Proton an obvious exception, of course.

    3. Re:Until Email transport security gets better.... by PPH · · Score: 1

      However, the major email providers all keep the server stuff in clear text. So unless you use end-to-end encryption like PGP

      This is my point. The TLAs don't need to crack SSL/TLS. They just get a copy from your ISP. My ISP only moves encrypted blobs for me. So I don't care if they've cracked the link or have free access to the server disk farm.

      --
      Have gnu, will travel.
  15. I use two by mhollis · · Score: 4, Interesting

    I use Apple for personal email. I have had a mac.com email address since Apple came out with it. Their current server name is "me.com" and Apple does not advertise in this service, as it is a paid-for service. It allows pop3 as well as IMAP.

    For professional email, I use gmail. Google does a great job of excising spam. It is advertiser-supported email, but I never use a web browser for my gmail account. Instead, I use the pop3 function. It propagates to my cell phone, my desktop and my tablet. When I delete something on my cell phone, it deletes on my tablet, but not on my desktop. For a free service, I do not think you can do any better than gmail.

    --
    Gods don't kill people, people with gods kill people.
    1. Re:I use two by Anonymous Coward · · Score: 0

      Apple also gives you an icloud.com email address.

    2. Re:I use two by Anonymous Coward · · Score: 0

      me.com hasn't been a paid service for probably 5 years. The current server is icloud.com which replaced mac.com and me.com, but both still work.

    3. Re:I use two by swillden · · Score: 1

      It is advertiser-supported email, but I never use a web browser for my gmail account.

      I don't have any problem with the advertiser-supported email model, or with Google (I work for Google), but it's worth pointing out that these things you put together in one sentence are not related. Not using a web browser doesn't prevent gmail from analyzing your emails to identify your interests. It does prevent gmail from showing you ads in the webmail UI (aside: using Inbox does, too, since for whatever reason there are no ads in that Gmail UI), but if Google can correlate your email and other traffic (note that I have no idea to what degree this is done), then it can still use information learned from your emails to show you relevant ads when you surf other sites.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    4. Re:I use two by Yaztromo · · Score: 1

      I use Apple for personal email. I have had a mac.com email address since Apple came out with it. Their current server name is "me.com" and Apple does not advertise in this service, as it is a paid-for service. It allows pop3 as well as IMAP.

      You are way behind the times on this.

      Apple replaced the "me.com" domain with "icloud.com" back in October 2011. They continue to maintain the "mac.com" and "me.com" domain names, but only for those people who were members back when those domain names were in current use. If you sign up for an account with them today, you'll get an "icloud.com" address.

      And secondly, an iCloud e-mail account is free, and has been since October 2011 when they got rid of the monthly subscription fees that were previously applied to the .Mac and MobileMe services. Indeed, the only thing you can pay for now is extra storage space -- I believe you get 5GB of free storage space, but can pay a small monthly fee for more.

      You are correct about it being advertising-free, and the POP3 and IMAP support.

      Yaz

    5. Re:I use two by gdp007 · · Score: 1

      Same here. iCloud.com - consider Apple's strong stance on privacy. It's been a flawless experience for me.

  16. Gmail and forget your privacy by Anonymous Coward · · Score: 0

    Just use Gmail. You've already been using a sub-par product. Why do you care about all those other bells and whistles when you never got close to using them before? Gmail's interface is unrivaled and it's just easy to use and provides 2 factor auth.

  17. I had the same problem... by Anonymous Coward · · Score: 0

    Years ago my cable internet provider supplied an e-mail from Yahoo (Rogers Canada) Then they split up and I left my e-mail with Yahoo.
    Years later and Yahoo stars sending me notices that the e-mail has been compromised. SO I start investigating alternatives.
    GhostMail Sigh! they are out of business, TutaNota, O.K. But now I am with Proton mail. they are Awesome.

  18. Gmail + Thunderbird by Snotnose · · Score: 2, Interesting

    I've got 2 gmail accounts (no, snotnose@gmal.com is not one of them). I connect to them via Thunderbird, which downloads the messages to my local hard drive. It's worked like a champ for some 8 years or so.

    1. Re:Gmail + Thunderbird by Anonymous Coward · · Score: 2, Interesting

      Be careful, as Thunderbird DOWNLOADS all folders, emails, and attachments by default. Including your SPAM folder. One of our users had thunderbird and our AV system went nuts because it was downloading the trojan attachments to the spam emails.

      I did a little digging but there was not clear answer on stopping it from downloading attachments by default.

    2. Re:Gmail + Thunderbird by Anonymous Coward · · Score: 0

      gmail works great, but if you are looking for privacy, that's not what you are looking for... they advertise that they scan all your emails (for advertising and other purposes)...

    3. Re:Gmail + Thunderbird by unixisc · · Score: 2

      I make sure it's an imap, rather than a pop3 connection, so that I don't lose what's online. Years ago, while on one of my Linux experiments, where I had KDE, I used Kmail once, and it acted only as a pop3 connection, and all my email was sucked up from the server. Later, when that hard disc got somehow corrupted forcing me to re-install, I lost all those emails.

    4. Re:Gmail + Thunderbird by Anonymous Coward · · Score: 0

      I connect to them via Thunderbird, which downloads the messages to my local hard drive after Google has permanently stored a copy of all of them for later use for any reason that you can imagine.

      FTFY

    5. Re: Gmail + Thunderbird by KGIII · · Score: 1

      I kinda want to chide you about letting that be a lesson in learning good backup strategy. ;-)

      --
      "So long and thanks for all the fish."
    6. Re: Gmail + Thunderbird by unixisc · · Score: 1

      What is a good email backup strategy under either Linux or (in my case) TrueOS (in other words, FreeBSD)?

    7. Re: Gmail + Thunderbird by KGIII · · Score: 1

      Save to disk and include in your regular backups. That's my method. I rsync stuff and have a small script that automates it and also pushes it out over the network to a buddy's place, where there's a drive hanging off a computer setup there. I kinda sorta mostly try to swap 'em in and out, but disk space is so cheap that I am a bit lax. I'm pretty sure there's like 6TB of storage at his place, though not all filled.

      --
      "So long and thanks for all the fish."
  19. Fastmail by jeauxkewl · · Score: 5, Insightful

    Fastmail for the win. Reasonably priced, don't think they are going anywhere and have been ultra-reliable. I've been with them about 15 years.

  20. Won't matter to me by p51d007 · · Score: 1

    I've had a yahoo address so long, it still ends in @sbcglobal.net All I use it for is online garbage...let all the junk go there from sites that require an email address to do anything.

    1. Re:Won't matter to me by Anonymous Coward · · Score: 0

      that puts it at about 15 years or so, I have one that ends with @rocketmail.com which is at least 20 years old

    2. Re:Won't matter to me by Bigbutt · · Score: 1

      Me too. My first "free" email account. I'd sent a joke out at work to friends and someone forwarded it to someone who didn't like it and complained to my boss. I popped out and snagged a rocketmail account and used that for my joke, and other things email. Then a yahoo account for one of my mailing lists for when I quit the job.

      [John]

      --
      Shit better not happen!
  21. Marissa?? by Anonymous Coward · · Score: 1

    Is that you?

  22. Runbox.com by Gaygirlie · · Score: 2

    "has a good Privacy Policy, and doesn't have a history of breaches or allowing snooping." -- Runbox fits all of those. Norwegians have very strong laws regarding privacy, which should please you, and the company doesn't do any advertising or crawling through your emails for tracking or anything like that. It's not a free service nor is it the cheapest one available, but I've been their customer for several years and I would at least recommend one to take a look at their offerings.

    1. Re:Runbox.com by ma1wrbu5tr · · Score: 1

      Thank you. I hadn't run across that in my searches previously. Added to the short list for further investigation.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    2. Re:Runbox.com by Anonymous Coward · · Score: 0

      Another one from over there with strong encryption is startmail.com

    3. Re:Runbox.com by Sir+Holo · · Score: 1

      "has a good Privacy Policy, and doesn't have a history of breaches or allowing snooping." -- Runbox fits all of those. Norwegians have very strong laws regarding privacy, which should please you, and the company doesn't do any advertising or crawling through your emails for tracking or anything like that. It's not a free service nor is it the cheapest one available, but I've been their customer for several years and I would at least recommend one to take a look at their offerings.

      How about anon.penet.fi?

  23. sounds like a job for protonmail by Anonymous Coward · · Score: 0

    protonmail.com. Offers encryption, promises not to sell your data (you have to trust them), and they have a free service to try. If you like it, you might consider using the paid service, which is fairly cheap, and supports alternatives to the data-mined services like gmail.

    If you want the best security, use GnuPG end to end from a local mail client.

    Whatever, just stay away from gmail if you want any kind of privacy. You also have to consider what the recipient is using. If you email TO someone on gmail, you have given away the contents unless you use GnuPG to encrypt it end to end.

    1. Re: sounds like a job for protonmail by Anonymous Coward · · Score: 0

      Also quite user friendly. Which I like as I'm not someone who still uses Pine to make a point.

    2. Re: sounds like a job for protonmail by Anonymous Coward · · Score: 0

      Use sylpheed to make your point, because it's open source. And if you subscribe to listservs it even sorts the messages by re: threads properly.

      Sylpheed is even available as a NetBSD package, and there is a fairly current windows binary available.

    3. Re: sounds like a job for protonmail by CronoCloud · · Score: 1

      You're either japanese or just time traveled from 2002, because nobody except Japanese and certain out of touch 'nix users living in the past use archaic sylpheed when claws-mail, a superior fork is around.

      Open source Claws-mail doesn't just have a "fairly current" windows build, it IS current. As well as builds for NetBSD AND FreeBSD.

    4. Re: sounds like a job for protonmail by Anonymous Coward · · Score: 0

      Slypheed and Claws are both buggy pieces of shit.

    5. Re: sounds like a job for protonmail by KGIII · · Score: 1

      It's Slashdot. If they have the source, build the damned thing themselves. Sheesh...

      --
      "So long and thanks for all the fish."
  24. G Suite or Office 365 by JeffTL · · Score: 1

    I have used G Suite for several years - Gmail running my domain's email. I get even more storage than regular Gmail, no ads, and I can still access my mail as an Exchange account on my iPhone so I can get push mail on Apple Mail. Before that, I had a hosted Exchange account with GoDaddy that did the job alright. Today if I wanted to go the hosted Exchange route I'd probably just do Microsoft Office 365's business plans that include email - either the $5 one that just gives you Exchange and OneDrive, or the $12.50 version that gets you all the Office applications as well. It looks like Microsoft offers something called Exchange Online that is just email with no OneDrive, in a couple of flavors. Which way you go depends on how you feel about Google and Microsoft. Microsoft's solutions will naturally play better with Outlook, if that is important to you.

    1. Re: G Suite or Office 365 by Anonymous Coward · · Score: 0

      +1. Office 365 for business, best email I've ever had totally worth the 5 bucks a month.

  25. Roll your own by RyoShin · · Score: 1

    I'm on the hunt for an email service that supports encryption, has a good Privacy Policy, and doesn't have a history of breaches or allowing snooping.

    You don't want any of the free offerings (like Gmail) then. As far as I know, every mail service that is free does snooping for advertising, whether it's directly in their web client or used elsewhere.

    I don't have any paid services to recommend (and even these may or may not come with data slurping) but you could always try rolling your own. Domain names are cheap ($10-$20/yr depending on who you get it through) and many domain registrars offer some sort of mail-setup that can vary greatly in price. GoDaddy is not a registrar I'd recommend, but for an example their e-mail service starts at $5/mo normally.

    You could also throw together your own mail server, but my understanding is that a lot of ISPs (in the US, which I presume is your country) are not happy with customers hosting anything regularly. Most shared website hosting plans come with some sort of e-mail service, but the abilities and prices can vary tremendously.

    Just know that if you roll your own you'll probably have to be a lot more hands on with things like spam, which can have varying degrees of annoyance depending on the method. With your own domain name you can also do neat things like per-registration routing (Gmail allows username+whatever@gmail.com, but a lot of sites don't accept that as a valid e-mail address) and it looks much better in business use. Having a site where you can host random things can also be handy from time-to-time.

    1. Re:Roll your own by SnarkSide · · Score: 2

      Running your own mail server isn't for everyone, but I'd say absolutely you have to own the domain if you want control. If someone else owns the domain that your account depends on, you have no control over the future of your own account. This is the fundamental error I made 18+ years ago when I started calling Yahoo my permanent email address and thinking only my employer addresses were transitory.

    2. Re:Roll your own by RyoShin · · Score: 1

      Indeed. I recall having a lot of problems when I used my .edu address for stuff in college and then graduated.

      For those that might be squeamish running their own, I believe Gmail offers a way to use its service with your own domain, but I don't know if that costs money (and they might still do data collection even if it does, which is why I didn't mention it in OP.) I imagine other e-mail providers offer similar options.

    3. Re:Roll your own by Anonymous Coward · · Score: 0

      It was free for awhile (Google Apps for Domains) but now it costs $5/mo/user (G Suite). I probably have 5-6 domains grandfathered into the old free version.

    4. Re:Roll your own by ma1wrbu5tr · · Score: 1

      I had previously ruled out the "Clinton Option" but you make a good case and bring up some ideas I hadn't considered. Thanks for replying.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  26. ProtonMail or Lavabit by Anonymous Coward · · Score: 0

    If you are talking about privacy, ProtonMail (https://protonmail.com/) or Lavabit (https://lavabit.com/) are both pretty good. ProtonMail has a free option as well.

    1. Re: ProtonMail or Lavabit by Anonymous Coward · · Score: 0

      2nd Lavabit

    2. Re:ProtonMail or Lavabit by Anonymous Coward · · Score: 0

      So, Lavabit is now in pre-registration for new accounts. Do you have any information about this? I see a bunch of articles that mention this back in January, but nothing recent.

  27. Use Gmail--and here is why by ebrandsberg · · Score: 4, Insightful

    The main issue with e-mail is that it has two parties involved. If either of the parties is compromised in a communication, then it doesn't matter how secure the other party is. Due to the sheer volume of people using Gmail, it is likely they already have a copy of most of your mail anyway. By using Gmail just like so many other people, you at least only have one system potentially snooping on you. If you believe that you are more secure using other systems, you are likely wrong.

    1. Re:Use Gmail--and here is why by Anonymous Coward · · Score: 2, Insightful

      That's a reason for nobody to use gmail, not a reason for everybody to use it.

    2. Re:Use Gmail--and here is why by Anonymous Coward · · Score: 0

      If it's a reason for nobody to use gmail, then it's a reason for nobody to use email at all.

      Start working on your replacement.

    3. Re:Use Gmail--and here is why by Anonymous Coward · · Score: 0

      If you can't beat them, join them.

  28. Your own website by Topwiz · · Score: 1

    You could create your own website and use the email services that come with the hosting package.

    1. Re:Your own website by Anonymous Coward · · Score: 0

      No.

      You'll find a lot of recipient mail services will reject your emails because they don't come from a well known domain. And they're not bounced, they're just quietly dropped so you don't even know it. When I eventually figured out this was happening with my own email domain, I was left wondering how many important emails just never went through. Like resumes and stuff.

      Gmail. Drink the cool aid. It's the only way.

    2. Re:Your own website by tajribah · · Score: 1

      I still prefer having my e-mail dropped by sites with silly administrators to having random legitimate e-mail dropped by my GMail account just because GMail uses an over-paranoid spam filter which cannot be tuned to my needs.

    3. Re: Your own website by Anonymous Coward · · Score: 0

      Gmail doesnt drop emails. They go to the spam filter where you can always find them within 30days. How you can say this is worse than your other one not letting you see the emails AT ALL is beyond me.

    4. Re: Your own website by Anonymous Coward · · Score: 0

      Yes, Gmail drops emails. They don't even go to the spam folder.

      I've seen it with my own eyes when I ran my own mail domain.

  29. Email simply is not secure by buss_error · · Score: 1

    Look, email is not secure. Not at all. Any other way to thinking about it is a lie.

    You see, email has to connect with just anybody. That means you can't exchange email freely, you have to have an agreed security frame work if you want email to work. Even TLS is no real protection.

    That being said, I'll upload an ansible script to set up a multi-tenet mail config you can run on any linux cloud provider or you can use only of the many that are already around.

    --
    Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.
    1. Re:Email simply is not secure by therealspacebug · · Score: 1

      Yeah. Email should be seen as sending postcards. It's about that secure.

      It's pretty easy though to send and receive encrypted email using for example PGP.

  30. Prepare to land in the junk folder by tepples · · Score: 1

    Now setting up your own email service isn't all that terribly hard.

    Provided you're fine with all your outgoing mail ending up in the junk folder. Even with working SPF and DKIM, deliverability isn't certain if anti-spam measures on recipients' mail servers refuse to accept mail from IP addresses issued by a home ISP.

    1. Re:Prepare to land in the junk folder by Bigbutt · · Score: 1

      I have a remote server I rent. The real problem is the spam filtering isn't the greatest. I generally just create a site-specific address and filter that into a folder and ignore my main mail address feed. 99.9% of it is spam. I counted it up at one point and had about 250,000 spam messages that had been filtered over the course of a month. On top of that, even though I use key based access only, the last time I counted I had 1.2 million attempts to hack ssh over 30 days. I blocked all of Taiwan and installed fail2ban and configured it to permanently block repeat offenders. That dropped the hack attempts quite a bit.

      [John]

      --
      Shit better not happen!
    2. Re:Prepare to land in the junk folder by robot5x · · Score: 1

      but he didn't say he'll be using his home ISP did he?

      --
      Hej! Nasi tu byli!
    3. Re:Prepare to land in the junk folder by tepples · · Score: 1

      If you are trusting someone else to manage your email, you will never be sure someone isn't reading your emails.

      recipients' mail servers refuse to accept mail from IP addresses issued by a home ISP

      but he didn't say he'll be using his home ISP did he?

      No, but he implied it. If you're not using your home ISP, you're leasing some sort of service from someone. This necessarily involves some level of "trusting someone else to manage your email".

  31. Any relay server harvests your info by WillAffleckUW · · Score: 1

    It really doesn't matter what you do for privacy, since all the relay servers in the email chain are harvesting your information anyway.

    And then giving the metadata (or meaning) to all the intel services. Which also are hosted at the connection points.

    However, if you fully encrypt your email at the source, host your own ISP. We'll still get the info, either from the recipient or other things you aren't aware we use, but it makes us work harder to get it.

    Free? Nothing is free.

    --
    -- Tigger warning: This post may contain tiggers! --
  32. Same here:Gmail + Thunderbird by Anonymous Coward · · Score: 0

    I resisted Gmail for a long time, but I migrated from Verizon when they pulled the AOL switch. I didn't use their offered migration tool for my contacts, I just did it manually, since they were all in Thunderbird to convert to a CVS file for Gmail import.

  33. Fastmail by Anonymous Coward · · Score: 0

    Fast mail is a commercial email service provider and a fast mail account is only a few dollars a month. I went to Fast mail because Google started to get funny about my second Gmail account that I use for eBay business. (My main Gmail account is "real name" based and I did not want that associated with my occasional buying and selling on eBay)

  34. Proton Mail by Rick+Schumann · · Score: 4, Informative

    I've had the same question recently and the answer I got was Proton Mail, based in Switzerland. Fully encrypted end-to-end. I'm surprised someone else hasn't mentioned it by now.

    1. Re:Proton Mail by sorenstoutner · · Score: 2

      I run my own email server, but if I wasnâ(TM)t able to I would likely use FastMail or ProtonMail.

    2. Re:Proton Mail by Anonymous Coward · · Score: 0

      It requires you to log in every time you visit the site though – I think that's a hurdle to usability that shouldn't be underestimated.

    3. Re:Proton Mail by LienRag · · Score: 1

      ProtonMail asks for a cellphone number "to verify that you are not a bot": since there are other ways to verify that, the whole thing seems a tad sketchy to me...

  35. Protonmail is quite interesting choice by Anonymous Coward · · Score: 0

    I would go for https://protonmail.com/ if you truly want to keep your messages as a secret.

  36. Proton Mail by ControlsGeek · · Score: 5, Interesting

    Proton Mail is hosted in Switzerland has end to end encryption with Android and IOS app support and has withstood denial of service attacks from suspected state sponsored hacking.
      Just the fact that a state actor tried to take them down is a reason to consider them.

  37. I use Signal I listened to Eric Snowden by wizzerking · · Score: 1
    1. Re: I use Signal I listened to Eric Snowden by Anonymous Coward · · Score: 0

      Signal Magazine was kind of the NAZI equivalent of Life magazine.

    2. Re:I use Signal I listened to Eric Snowden by ma1wrbu5tr · · Score: 1

      Will check it out. Thanks for replying.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    3. Re:I use Signal I listened to Eric Snowden by Lostcause · · Score: 1

      I second Proton Mail. You can/should encrypt your email box with an additional password.

  38. do it yourself by Anonymous Coward · · Score: 0

    toss a sendmail instance onto AWS, done. Not sure if it's better to select a region inside or outside the U.S. to avoid the enessaye.
    What are you some sort of girlie-man end-user?

  39. Don't just get a mail provider. Get an address. by grnbrg · · Score: 5, Interesting

    You are already going through the pain of changing your address. Make sure you don't have to do it again some time in the future. Mail providers change policies or shut down, sometimes without warning.

    Go ahead, and pick a mail provider that you like. But also go out and buy a personal domain. You'll probably be able to find one you like for $10 per year, and you can find DNS providers that will do mail re-direction for free. Have a wildcard redirect set to send any email sent to the domain forwarded to the new mail address. Don't like the way the provider is now doing things? Get a new provider and email address, and change the redirect.

  40. Don't rely on an email service for encryption by hackel · · Score: 1

    If you want encryption, you really need to just do it yourself. When you do, it doesn't make any difference which provider you use. I would use Gmail simply because they are so huge, the reliability shouldn't be an issue. It works with any standard IMAP client, and since your messages are encrypted, Google can't even scrape them to profile you. Also make sure you are using your own domain name, so that you can easily change providers should you ever wish to.

  41. You neither need nor want encrypted email by Anonymous Coward · · Score: 0

    First of all, encrypting your email does not make it any more secure. Second of all, encrypting your email does not make it any more secure. Finally, encrypting your email does not make it any more secure.

    In addition to these reasons, there are more reasons. And then there are even more reasons.

    In closing, there is neither anything you can do to make email secure and private, nor anything you can do to make email secure and private.

    I hope this helps.

    1. Re:You neither need nor want encrypted email by Anonymous Coward · · Score: 0

      First of all, encrypting your email does not make it any more secure.

      Here's what I have to say about that. I'm sure you'll tell us all what it says.

      -----BEGIN PGP MESSAGE-----
      Version: GnuPG v1

      jA0EBwMCKxgAi4YsAZNg0lEBZeEVJ3pEdaqEhc25k25B10Ng9qDTjCVhT+vSo9t2
      R9tLpUOPSOgzA7a4HYfIqqrYT0WUwZ+Oup6evuZqYTO3QxslUHV69SrqVk5E1pTs
      L3E=
      =8O56
      -----END PGP MESSAGE-----

    2. Re:You neither need nor want encrypted email by Anonymous Coward · · Score: 0

      Citation needed!

    3. Re:You neither need nor want encrypted email by CronoCloud · · Score: 1

      As far as I can tell it is encrypted with just a passphrase and not to a key?

    4. Re:You neither need nor want encrypted email by Anonymous Coward · · Score: 0

      Irrelevant. Once you send it and the recipient decrypts it, it is no longer secure and no longer private. You have no control over further dissemination.

  42. ProtonMail by bradley13 · · Score: 1

    I'm looking around as well, and what I read about ProtonMail is pretty convincing. They offer free or paid accounts, promise no logging, and they're located in Switzerland.

    --
    Enjoy life! This is not a dress rehearsal.
    1. Re:Protonmail by 110010001000 · · Score: 1

      Aren't they the geniuses who thought it was a good idea to pay blackmail to stop a DDoS? How does it use Azure though? I thought they ran their own servers and didn't use the "Cloud"

    2. Re:Protonmail by TheOuterLinux · · Score: 1

      https://protonmail.com/blog/protonmail-ddos-attacks/

      My bad on the Azure thing. I got it confused with Tresorit.

  43. Completely agree by Calibax · · Score: 5, Insightful

    I've been with Fastmail since it was in beta in 2001. The company ONLY does email and associated services. This means they are focused on making it work correctly and users having a good features. I would never consider moving.

    1. Re:Completely agree by Anonymous Coward · · Score: 0

      Fastmail has been good generally, but they had one outage last year that took at least 1 day, so hopefully they will regain the stability they had in the past.

  44. Amazon WorkMail by Anonymous Coward · · Score: 0

    It's easier than trying to roll your own in an AWS instance.

  45. ProtonMail by Anonymous Coward · · Score: 0

    Protonmail dot com might be what you want.

  46. G Suite by Anonymous Coward · · Score: 0

    Google's paid services (G Suite) have very sane policies. Good luck if you decide to go with something "free".

    https://support.google.com/a/answer/60762?hl=en

    https://gsuite.google.com/pricing.html?tab_activeEl=tabset-companies

  47. Private Server by duke_cheetah2003 · · Score: 1

    Follow in the steps of Ms. Secretary Clinton and put together your own private email server!

    I did that like 20 years ago when it wasn't as popular.

    1. Re:Private Server by Chewbacon · · Score: 1

      That's a lot of work and a lot of room for error. Not worth it unless you really don't want to answer to anyone about email. You can get it done on AWS.

      --
      Chewbacon
      The Bible is like Wikipedia: written by a bunch of people and verifiable by questionable sources.
    2. Re:Private Server by Anonymous Coward · · Score: 0

      Follow in the steps of Ms. Secretary Clinton and put together your own private email server!

      I did that like 20 years ago when it wasn't as popular.

      It did not work so well for Ms former Secretary not President Clinton.

  48. sonic.net by Anonymous Coward · · Score: 0

    sonic web hosting account, $10 USD/mo, includes imap+pop and shell account. no affiliation, +10 years wo issuesâ.

  49. Don't be obtuse by bradley13 · · Score: 3, Informative

    Don't be obtuse.

    Of course there's no perfect security. You know, if a burglar wants to get into you house badly enough, he'll get in. So why bother locking your door? In fact, just leave your front door open... Oh, change all of your PINs to 1234 and your passwords to "password" while you're at it. After all, if there's no perfect security, why have any security.

    The point of TFS is finding a service that is as secure as reasonably possible, while still being useful.

    --
    Enjoy life! This is not a dress rehearsal.
    1. Re:Don't be obtuse by Anonymous Coward · · Score: 0

      LOL "secure as reasonably possible"

      I will admit that is slightly less vague than the first requirement, but equally as useless

      Who are you trying to keep out of your email? would be the first question that I would ask

      Given most answers, I would also start asking questions regarding the physical security that your have in place for the device/network that you will be using to reach that email service...

      You really need to step up your game

    2. Re:Don't be obtuse by 110010001000 · · Score: 1

      What is as "secure as reasonably possible"? It either is secure, or it isn't. No email service is secure. You might as well use Gmail. Or stick with Yahoo. Or host your own. What is the difference? None of them are secure.

    3. Re:Don't be obtuse by Minupla · · Score: 1

      We could define "secure as reasonably possible" as "occupying a value in a coordinate plane with one axis containing ease of use, and the other being risk (comprising an overall scoring for confidentiality, availability & integrity (in a data non-alteration sense, not a moral sense)) so as to minimize the risk axis while keeping the ease of use axis below a value that 75% of people would find acceptable".

      That work for everyone?

      Min

      --
      On the whole, I find that I prefer Slashdot posts to twitter ones because I don't get limited to 140 chars before
    4. Re:Don't be obtuse by 110010001000 · · Score: 1

      Oh in that case I recommend Hotmail.

    5. Re:Don't be obtuse by Minupla · · Score: 1

      And maybe that works fine for you, it does my mother. Nothing wrong with using a solution that meets your needs and satisfies your risk tolerance. Companies make exactly that sort of trade-off all the time. The issue comes when they're not honest about one of those two variables.

      Min

      --
      On the whole, I find that I prefer Slashdot posts to twitter ones because I don't get limited to 140 chars before
    6. Re:Don't be obtuse by Anonymous Coward · · Score: 1

      There is "secure enough". You can make up any doomsday scenario: If the badguys wanted your information, they could send over goons to hit you with a $5 wrench until you gave up your disk encryption passwords. So why bother with any encryption? Because unless doomsday comes during your lifetime, you'd like to have a modicum of privacy! Life isn't black & white, Mr. Autistic! Have the best of mostly good enough security.

      Otherwise you might as well go into a men's prison as a sex surrogate because .. you know .. there is male on male rape, no way to make it 100% preventable.

    7. Re:Don't be obtuse by Anonymous Coward · · Score: 0

      So, your mother is either a time traveler or using MS Outlook 365

      good for you

      Being ignorant does not give license to be a dick to people who obviously know more about the subject than you do

    8. Re:Don't be obtuse by Anonymous Coward · · Score: 0

      Then just use GMAIL and stfu, go with easy and figure out ahead of time how you are going to signal information for subject matters that you do not want used for advertising fodder

      There is nothing like a face to face conversation, provided you take into consideration a multiplicity of potential attack vectors

    9. Re:Don't be obtuse by nosfucious · · Score: 1

      TL;DR

      Free, easy to use, secure. Pick any two.

      --
      Q:I was listening to a CD in Grip and it sounded horrible! What's up? A:Perhaps you are listening to country music
    10. Re: Don't be obtuse by Anonymous Coward · · Score: 0

      it does my mother

      Me, too.

    11. Re:Don't be obtuse by Anonymous Coward · · Score: 0

      ^ this

      however, you're outnumbered: being a smug misanthropic prick is all the rage among nerds. the less the know the more they smug.

  50. Re: by Anonymous Coward · · Score: 0

    Gmail is slow, doesn't allow spam configuration, and is US g-mail for the g-men. It is great for email you don't care about.

  51. fetchmail + sendmail + imapd + horde by Orgasmatron · · Score: 1

    Build or rent a server, load it up. Fetchmail can fetch mail from any POP or IMAP provider, if you want to go that route. Or, you can accept mail directly through sendmail, which is not trivial and requires a domain.

    If you don't want to lose control of your email address ever again, you can register a domain and either host it yourself, or find a commercial host that will work with customer domains.

    Outgoing with sendmail is easy, or your incoming host will usually provide it too, if you prefer that.

    Horde works great with activesync devices, or with browsers. It can also manage your calendar, contacts, notes, todo list, etc.

    Advanced topics for the DIY crowd: greylisting, spamassassin, DNS-rbls, SPF, SRS

    --
    See that "Preview" button?
    1. Re:fetchmail + sendmail + imapd + horde by eneville · · Score: 1

      Build or rent a server, load it up. Fetchmail can fetch mail from any POP or IMAP provider, if you want to go that route. Or, you can accept mail directly through sendmail, which is not trivial and requires a domain.

      If you don't want to lose control of your email address ever again, you can register a domain and either host it yourself, or find a commercial host that will work with customer domains.

      Outgoing with sendmail is easy, or your incoming host will usually provide it too, if you prefer that.

      Horde works great with activesync devices, or with browsers. It can also manage your calendar, contacts, notes, todo list, etc.

      Advanced topics for the DIY crowd: greylisting, spamassassin, DNS-rbls, SPF, SRS

      This. Except I'm not a sendmail fan. qmail/djbdns has done me fine since 2003, very reliable, very easy to patch. The .qmail rules that have built up over that time allow me to avoid spamassassin on addresses that are not mail lists or things I know are social media related etc, very handy and saves a lot of wasted CPU. Greylisting is good, but annoyingly some web servers try and deliver directly on tcp/25, and don't queue if given a 4xx.

      The very real benefit to running your own is that you can easily ssh to the machine and run mutt in a screen. So much more efficient than a web browser that renders the text/html part full of junk.

  52. Re:Don't just get a mail provider. Get an address. by eric2hill · · Score: 2

    To add on to this great advice, PAY for G Suite. It's $50/year for the mailbox, completely ad-free, and comes with business support. It doesn't support complete integration like the free gmail account (Play family sharing is a particular pain point), but it's the best anti-spam solution available today and that's worth the money alone. Add to it the benefits of Drive, Photos, Hangouts, etc and it's a fantastic value for the money.

    --
    LOAD "SIG",8,1
    LOADING...
    READY.
    RUN
  53. buy a domain, get a hosting service by gosand · · Score: 1

    A lot of hosting services provide plenty of space. They come with free email accounts too, so you can set up 'throwaway' emails like donotspamme@yourdomain.com that you can use for services that might spam you.

    Shop around for the hosting providers that have what you want. I use fetchmail to pull mine down locally, and pine as my client (yes, for real), but there are plenty of email clients or webmail options on your provider.

    Best of all, you can keep your domain and you control it.

    --

    My beliefs do not require that you agree with them.

  54. Protonmail by TheOuterLinux · · Score: 2

    It's available via web and on mobile devices, including iOS 8 if you have an older phone. You get 500 MB storage free, uses two passwords (one for account and one for mailbox), and the providers themselves cannot recover your mailbox passwords. You can tag your emails, make folders, identifies spam, and has an easy way to report bugs/features. They also have a bounty program for hacking with no success and are protected by Swiss privacy laws. It was made by CERN and MIT. The servers are located in a bunker 1000 meters below the Swiss Alps that use end-to-end encryption and 4096-bit SSL certificates. No cloud hosting and they manage their own stuff. https://protonmail.com/securit... The only problem is that it uses Azure. I'm not an M$ at all, but it's either this or Enigmail with Thunderbird and Protonmail is very easy to use and the customer support is awesome whether you're a paying member or not.

  55. Get your own domain name, then use gmail or else by c120plus · · Score: 1

    I got my own domain name in 1998 and so own my email address. I forward that to a free email provider, and when I'm not happy, I point my email to the next one. I made this switch approx 3 times when my current mail provider was annoying me too much with ads or price hikes. Owning you email address is totally worth it, just imagine all the time you save when you make the switch...

  56. Proton Mail is a great Alternative by evolutionary · · Score: 1

    Where Google basically mines your data en masse and gives it out to US government agencies, Proton Mail is in Switzerland and is not subject to involuntary data request from USA government requests. (Of course they could do it voluntarily but it would really hurt their rep if word got out) https://protonmail.com/

    --
    "Imagination is more important than knowledge" - Einstein
  57. If you want privacy, use G Suite by mellon · · Score: 4, Insightful

    The Terms of Service are actually pretty strict, and Google has extremely good data center security hygiene. The ToS on gmail are much more lax, even though it's the same software.

  58. Germany by Anonymous Coward · · Score: 0

    For a free service, you may want to check out other countries, such as Germany. https://www.gmx.net/

  59. President Trump's preferred alternative... by evolutionary · · Score: 1

    Fresh from Russia: https://mail.yandex.com/

    --
    "Imagination is more important than knowledge" - Einstein
  60. Postfix + Dovecot by guruevi · · Score: 1

    Duh... if you want control over the privacy of your mailbox, you have to host it yourself. You can do that at home with some ISPs (give them a call if they actively block port 25, some will simply unblock it), most VPS and many other hosting systems, you can get a good host for a few bucks a month and it's "free" if you already have one for business or other purposes or if you have a business or someone with business-grade ISP's you can also host systems (perhaps offer a trade)

    You can pick a host in far-away-istan or closer to home depending on your government, I myself have dedicated servers hosted in the US (for latency reasons) but hosted by a non-US company with encrypted file systems that are backed up to a disk at another site. I'm not sure if the hosting company at Sealand still exists, if you're really worried about government checking up on you there are various offshore hosting companies but then you wouldn't be using e-mail in the first place although offshore hosting is typically ~$1-200/month even for the simplest servers.

    --
    Custom electronics and digital signage for your business: www.evcircuits.com
  61. For a paid email by Anonymous Coward · · Score: 0

    You could try tuffmail for the configuration flexibility

  62. your own by holophrastic · · Score: 1

    is there a reason that you don't just have your own mailserver? you have three options:

    option 1: buy/pay for a hosted/managed/co-lo/virtual/private-cloud webserver somewhere. you can pay between $5 and $500 per month, and install whatever you choose.

    option 2: buy/pay for an account with someone who's already done option 1 above. you can pay between $2/mailbox and $100 per month. I would charge you $25/month for many mailboxes. You can manage them however you choose.

    option 3: buy a domain name, and point it to you static or dynamic home ip address. run your own mailserver at home. it'll cost you nothing beyond the domain & dns level of probably $25 per year. presuming your connection is reasonable -- and e-mail compensates for occasional fluctuations anyway -- you'll have everything under your own roof.

    In all three cases, you have 100% privacy. Options 1 & 3 let you have whatever features you can imagine. And no matter what you'll have far more control than you've ever had before.

    Personally, in your position, I'd go the game clan method. Get three buddies, pool your pennies, choose option 1 above, spend $50-$100/month on a virtually-dedicated/private-cloud server that starts off with some reasonable package of carp already setup for you, and take it from there. My neighbour offers such packages at every price range imaginable.

    1. Re:your own by jaklode · · Score: 1

      AFAIUI, option 3 is unrealistic, as the big email servers black list dynamic IP addresses, or well, IP address blocks used for home internet connections.

    2. Re:your own by holophrastic · · Score: 1

      yeah, but that's easily resolved by buying an ip address, and the appropriate service. Although I agree that does quickly destroy the budget-apeal of option 3.

  63. Don't understand what you are trying to accomplish by Anonymous Coward · · Score: 0

    I understand what you want to do but if you send email to anyone else, they have a copy of your email you sent them. I understand if you get email and such from your banks, credit card companies, etc that are basically one way to you is something you can control but if you send email to your friends or family they are not on the same provider... so what are you trying to accomplish? If you get all of your friends on your one email server or like other ProtonMail, that may work but that means everyone you know and will know has to be on one system. So what is the point of moving? Email is and always has been a terrible way to share information that should be "secret". Too many ways for it to leak and thus if you are worried about that, then get off email entirely.

  64. Re:Don't just get a mail provider. Get an address. by tonymercmobily · · Score: 1

    Love your signature. You obviously had a super fast floppy disk drive... I never managed to get my hands on one of those! :)

    I wonder how many here understand it :)

  65. Proton Mail by fadethepolice · · Score: 1

    Proton Mail

  66. Email Privacy/Security by mattmarlowe · · Score: 2

    If all you care about is convenience and price, gmail is the best bet.

    However, gmail has a few weak points:
    - Governments and corporations assume you are using it, if you become a target, first thing they do is sue or force google to give them a copy of all your email. You may not find out about it until after the fact. Basically, using gmail/google means you are OK with the surveillance state being able to grab all the details about your digital life whenever it wants.
    - Hackers assume that getting access to email is the best path in social networking and they have put together an extensive trick list focusing on gmail since everyone uses it. And, if they gain access, are you sure you would know about it or even if google found out about it, that they would tell you? It's in google's interest that everyone forget about the security of their cloud data.
    - Gmail gets coordinated with all the other info that google knows about you and google sells info about you to their customers or targets ads for you on behalf of customers. Frankly, even without email, I think google knows enough already.
    - Gmail imap is _wierd_ and google will probably shut it down in favor of some google only protocol if they ever can.
    - Google is no longer a _good_ company, as it has become bigger, it has started to act more like a Monopoly and that combined with its ownership of android is pushing us more towards a closed internet. I honestly don't want to support Google's growth anymore.

    Another option is office 365:
    - Microsoft has its issues, but it realizes it really needs to compete in the cloud space.
    - Microsoft email integrates well if you have a mobile hardware device like a Surface Pro/Surface Book.
    - Exchange sync for contacts/calendar/groupware is hard to compete with.

    That said, MS has its own security issues....so the best solution is likely hosting your own email....and for those who don't have the time to be constantly updating, find a good mail software suite that does get updated automatically and which has a good security history. Zimbra might be a good example - there are many others.

  67. Another missing requirement by fustakrakich · · Score: 1

    Try to find a free service that doesn't require a cell phone.

    --
    “He’s not deformed, he’s just drunk!”
  68. Ignore U.S. services, use EU services by Anonymous Coward · · Score: 0

    Posteo.net, mailbox.org, protonmail.com, and startmail.com are probably the most widely used that fit your requirements. These are all based in the EU and outside of the U.S. gov reach.

    1. Re:Ignore U.S. services, use EU services by guises · · Score: 1

      A couple more: countermail.com, neomailbox.com

      Also, ThatOnePrivacyGuy (who mostly does VPN reviews) has a section on his website for email services. I like his reviews, he seems to have a good approach to all of this.

  69. Related: How do I get my Y! email out? by Bomarc · · Score: 1

    I believe that Y! is the only free email service provider that won't let you bulk-save your email messages. So, I've all but left Yahoo; however How do I get my (old) messages out?
    (Before the 'let it go' people come, I need the messages for legal purposes).
    I was able to get *some* of the messages to Gmail; however, I would like to get all of them.

    Suggestions?

  70. Also a Yahoo evacuee - switched to Zoho mail by Anonymous Coward · · Score: 0

    Zoho mail seems very good so far, I looked at a few and they seemed reliable (around for the long haul) and good for general purpose mail.
    I have also setup Proton mail for privacy and am very impressed with them.. was considering using them as my main mail but took the safe/coward route, just in case they are ever forced-closed or blocked for being too private for normal citizens.
    Q

  71. What about outbound mail? by Megane · · Score: 1

    I have AT&T as an ISP, and a few years ago they farmed out their mail to Yahoo. I run my own inbound, but for at least a decade, I have dealt with the outbound port 25 block (even before it got blocked) by forwarding outbound mail through my ISP. When it was just AT&T, they could identify "friendly" mail by being in one of their IP blocks. Now you have to use your account's e-mail/password combo.

    The problem is that by default it only accepts mail with a From: address equal to that specific e-mail address. Any others you want (I typically use one user name with two different domains, one or two other household members), have to be specifically added with the Yahoo Mail user interface.

    I guess I may just end up having to ask for outbound 25 to be opened up, and re-configure my server to send outbound mail directly. The negative side is that will cause my mail to come from a customer address (anti-spammers are likely to flag the IPs as "dynamic", even though it's in a static block), so I may have to get a hosted server for an outbound relay.

    Or I could even get lucky, and AT&T might realize the situation they are now in (e-mail service outsourced to one of their telco competitors) and in-source it again.

    --
    #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
    1. Re:What about outbound mail? by DottedQuad · · Score: 1

      I have been sending out (and receiving) email on a static IPv4 address on my home AT&T U-verse connection for years without major problems. They block port 25 by default, but just ask them and they will remove the block for you. I pay an extra fee for a chunk of static IP address space, but I get forward and reverse DNS how I want.

  72. Zoho + Thunderbird by Anonymous Coward · · Score: 0

    I switched to Zoho mail. It's a suite of stuff aimed at enterprise but you can get a free personal account. There's no automatic signature added to outbound emails. I access it using Thunderbird. It all works quite well.

    I think they they make their money by selling enterprise licenses. The free accounts are to get you to try the service and like it so much you'll use it for you business. They aren't making money by selling your data (or data about you).

  73. Upload Status Message by Anonymous Coward · · Score: 0

    It's likely saving a draft of whatever you're writing. Not having used my Yahoo account since I stopped playing online board games during lunch, I'm unable to verify that theory, but I'd bet money on it*.

    *All your money.

  74. Re:Don't just get a mail provider. Get an address. by Anonymous Coward · · Score: 0

    Some professional organizations provide, as a membership benefit, an email forwarding address - similar to having your own domain. They might also provide spam filtering on that address, which lops off the more egregious stuff before it hits your actual mailbox. Since you're going to pay dues anyway, why not get something for them besides an occasional magazine and weekly requests for donations? IMO, all (at least technical) professional orgs should offer this.

  75. protonmail by Anonymous Coward · · Score: 0

    http://www.protonmail.com can recommend

  76. Thank you to all commenters. by ma1wrbu5tr · · Score: 1

    You have given me much food for thought. Perhaps to follow will be a detailed description of my preferred solution.

    --
    Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  77. Really? by bongey · · Score: 1

    What took you this long? It's 2017 not 1997.

  78. Re:Don't just get a mail provider. Get an address. by TeknoHog · · Score: 1

    This is probably not very relevant, but in Finland we have this thing called http://iki.fi/ that provides permanent redirect addresses for web and email. They charge a one-time signup fee around 30 EUR for life. It's only for Finnish residents, though. The closest international equivalent I can think of is http://sdf.org/ -- I also paid a similar one-time fee for a somewhat expanded account.

    --
    Escher was the first MC and Giger invented the HR department.
  79. Submit a bug report by Sigma+7 · · Score: 1

    If the browser uploads something, and you can't find out what's uploaded, then that's a severe security issue more serious than auto-executing javascript.

    If you can find out what's uploaded simply by pressing F12 and viewing the networkt tab, then there's nothing to worry about. In case of Yahoo mail, it's probably saving the draft.

  80. A good email client: by Anonymous Coward · · Score: 0

    I bought and have used Fastmail for years: it always works and it is okay. Australian owned, based in New York. No spam, ever. John Tranter, Sydney, Australia.

  81. Re:Don't just get a mail provider. Get an address. by CronoCloud · · Score: 1

    You obviously had a super fast floppy disk drive...

    The 1541 super fast? Ha ha ha ha

    I never managed to get my hands on one of those! :)

    UK? They were considered de-rigeur in the states.

    I wonder how many here understand it :)

    Probably most of Slashdot.

  82. Protonmail by Anonymous Coward · · Score: 0

    Didn't see anyone mention Protonmail. People seem to either be unaware of it or love US email providers (not a good idea!). It's based in Switzerland so they don't have to comply with horrendous US privacy laws on data collection. It works and looks just the same as any other email provider. They encrypt emails by default so that they can't even read your emails, so this means that you cannot search emails by its contents, only its headers. It is free for normal users but has premium options (I've never noticed the lack of features).

    There are other providers similar to Protonmail.

  83. Fastmail by Anonymous Coward · · Score: 0

    I use fastmail for my business because it's not google or microsoft. I ran my own server for a while - inidivual components then migrated to kolab. wound up using fastmail to keep my mail from winding up bounced as spam. I really liked kolab though, and I would recommend checking out their hosted service since they actually care about freedom.

  84. SSMTP is *not* Secure SMTP -- that is SMTPS by Anonymous Coward · · Score: 0

    SSMTP is a submission relay agent. Alternatively is *could* be SMTP over an SSH tunnel.

    You probably mean SMTPS, which is SMTP over SSL/TLS (aka SMTP Secure).

  85. Mail and services by Anonymous Coward · · Score: 0

    For many things, e-mail is now one of those infrastructure/utility things that is now one of many that complements a different centerpiece service, such as music video delivery and stuff.

    My case:

    For Yahoo, it used to be GeoCities (remember, that GeoCities offered their own e-mail address, too), and they migrated their GeoCities userbase over. E-mail was then a useful add-on to the Yahoo portal and search. For a time, Yahoo's e-mail was great, until spam overwhelmed everyone.

    Yahoo later bought Launch, and became the first large-scale music video delivery service—with ads and all, and the difficult ways to get Windows Media Player to play for sure on Mozilla and then Firefox 1.0. But Launch.com was the property that made Yahoo great. Until they began putting ads between each music video, which was horrid.

    (Yahoo later bought flickr and tumblr, and while these have added value, then Yahoo has had a haphazard time getting to monetise those two.)

    After Google bought YouTube, which quickly became the primary music video delivery service (along with Vevo), the Yahoo Launch site lost relevance. Maybe only die-hards swear by it. While Flash at the time was way more resource-intensive than a plug-in, then Flash was available for Mac and Linux, and arguably cross-platform on the desktop, thus managing to play videos without a hitch (YMMV). Using Flash from the outset made YouTube great. YouTube is now the centerpiece of all of Google's web properties.

    A similar service to YouTube was msn video, but it was a pioneer vaguely similar to Launch; while msn video had plenty of user-created videos, I don't recall it ever having music videos.

    For Google, the centerpiece is YouTube. E-mail is still great, and many people also use Blogger, Google Docs, and some even Google+. Android complements and extends the whole bunch.

    For Microsoft, it's probably a combo of Office Online, OneDrive, Skype on the web and a few other tidbits.

    For Yahoo, the centerpiece services are news, flickr, and tumblr (in no particular order).

    Apple could be best described as a non-service. It does offer services all right, but none of them has killer web features compared to above players.

    Both Yahoo and Microsoft did social networking, and for a time, both were reasonably good, but seemed to have been shuttered after Facebook became a thing.

  86. Re:Don't just get a mail provider. Get an address. by XXeR · · Score: 1

    Wow, so you're pretty much a dick, huh..

  87. After golden parachute say nice to use gmail again by Anonymous Coward · · Score: 0

    since you... and only you designed it... what a country...

  88. Tried that and was not satisfied by Anonymous Coward · · Score: 0

    The flaw in self hosting is the lack of spam filtering. I gave up when spam traffic was 10 to 20 times the real content. This also lacked easy access when on the road, unlike webmail.

  89. Yandex Mail For Domain by atomlib · · Score: 1

    If you have no biases against a Russian company, I highly recommend Yandex Mail For Domain where you can use your own domain name free of charge. Personally I use it as my main e-mail account. Or you may use their regular Yandex.Mail if you don't have your own domain name.

  90. Fastmail by thatkid_2002 · · Score: 1

    Although I run my own primary email, I chose to pay for Fastmail as my secondary/backup/place where I get emails for my primary services sent so that way I can recover them when they go down.

    If you're looking for a high-quality, run by people who give a damn, and (in my opinion) trustworthy service then Fastmail is the way to go. It's not the cheapest and doesn't have massive limits though.

  91. Run your own on a VPS for ~ $5/month by Anonymous Coward · · Score: 0

    It's pretty quick and simple, and low maintenance:

    https://mailinabox.email/

  92. KolabNow by jouassou · · Score: 1

    If you don't mind paying $3/month, I highly recommend KolabNow. They offer both webmail and IMAP access, the software they develop is open source, the company's privacy policy is great, and they're hosted in Switzerland which also has sane laws regarding privacy. The few times there's been issues (DDoS attacks, Heartbleed bug) they've been upfront about it and sent out a mail immediately explaining the situation and what they're doing to address it. I've used them for four years now, and I'm quite satisfied.

  93. Re:Don't just get a mail provider. Get an address. by CronoCloud · · Score: 1

    Why assume malice? I assumed the person WASN'T being sarcastic because if he was he should have emphasized it a bit more.

    Besides that, 1541 ownership WAS very low in the UK most UK C64 owners got their games on tapes which was not the case in the US.

    And while the 1541 is faster than a tape drive, it was slower than Apple and Atari drives.

  94. Thank you! I hate Gmail's UI! by wwphx · · Score: 1

    I've had Yahoo Mail since before '02, and I'm not sure I'm going to give it up now. I could put it on my own server, but I just haven't committed to that yet. I absolutely hate the UI on Gmail, even though I maintain three accounts there for various purposes. I think I'm just going to wait and see what Verizon does. Maybe they'll give me a price break on my cell bill (yeah, and monkeys might fly out of my butt).

    --
    When you sympathize with stupidity, you start thinking like an idiot.
  95. Re:Don't just get a mail provider. Get an address. by ma1wrbu5tr · · Score: 1

    C64 FTW

    --
    Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  96. Does the NSA have their own webmail service yet? by 0111+1110 · · Score: 1

    I guess the NSA doesn't need their own webmail because they pretty much have open access to all the big American webmail companies. For some reason I have the idea that Gmail in particular is like home base for the NSA.

    If you have a gmail account you basically have to assume that everything you write there will be permanently stored and searchable in an the NSA text database. I guess some people are cool with that though. A lot of people don't care. It doesn't really bother me that much either, but it's not like there isn't a choice. So I go with offshore webmail instead.

    --
    Quite an experience to live in fear, isn't it? That's what it is to be a slave.
  97. Re: by minstrelmike · · Score: 1

    Gmail has automatic spam-blocking built-in. Whoever posted that they don't is probably some fBook flunkie.

  98. Posteo for example .. its not free .. by burni2 · · Score: 1

    Because everything thats free comes with a catch .. except free beer.

  99. Protonmail or GMX by Anonymous Coward · · Score: 0

    I've used Gmail for years, and due to the way that Google is trying to build walled gardens in Android and Chromebook, I no longer trust Google for the long run.
    So I think the only sensible reply to this request so far is Protonmail. The only problem I am aware of with it is that the encryption might be cumbersome for some users and in some circumstances, but I suggest that you try it and see if you like it.
    If you don't like Protonmail, I would recommend GMX as a second choice. It's owned by Deutsche Telekom, so as of now its future looks relatively secure for a free online service (especially compared to Protonmail). It's based in Germany and promises not to meddle with your messages (the way Google does), so as of now both its legal regime and its ownership's security policy look good. The only downsides I've found with fairly extensive use of GMX is that its web interface is fairly clunky, signing on to the US version (gmx.com) requires going to a page that feeds idiotic celebrity news, and the site automatically logs you out after a fairly short period of inactivity. So I recommend using it with an IMAP email client such as Thunderbird, which is faster and cleaner.

  100. Automatic forwarding failed until I fixed it by eric_harris_76 · · Score: 1

    My yahoo.com address has been around a while. It's the one I used for many newsletters and web-based services over the years. A large portion of my e-mail comes to me via that address, forwarded automatically to my ISP address.

    So when e-mail forwarding failed, without warning, it had consequences. It took over a day for me to notice it and to take corrective action: turn it on when it was already on, and then verify I wanted it on.

    A chunk of that time was spent finding current information about how to check the status of forwarding (it was on) and how to turn it on (which I did, anyway). Once I opened the e-mail to verify activation, it worked as though nothing had happened.

    Except that a bunch of e-mails which didn't get forwarded before still didn't forward.

    Understandable, and desirable, when turning on automatic forwarding that had not been on. You likely wouldn't want all the e-mail in your inbox, no matter how old, to get forwarded to that address -- just the new e-mail that arrived after automatic forwarding was turned on.

    Still, a pain in the ass. No response from service@yahoo.com. But it's been zero business days since I notified them (Friday evening), so maybe it's too early to be disappointed with them.

    Tomorrow evening is not.

    --
    There's no time like the present. Well, the past used to be.
  101. wow yes, gmail all the way by kbdd · · Score: 1

    At the moment, I have 8 email accounts on 5 different systems. Like others, I use gmail predominantly and gmail provides by far the best user experience and performance. I do have a Yahoo account that I cannot close right away unfortunately, but I have to find a way to wind it down. Yahoo mail has always had a terrible user experience and is excessively crash prone and a CPU hog on the desktop to the point that I no longer use it on the desktop, I do use the Android Yahoo mail app that seems a little more robust but nowhere at the level of the gmail app. I have given up on independent (like Thunderbird) POP3 (too inconvenient) or IMAP mail clients because of poor or absent synchronization between devices. Put your pride carefully in your pocket as you might need it later, and use gmail.