Slashdot Mirror


Ask Slashdot: Advice For a Yahoo Mail Refugee

New submitter ma1wrbu5tr writes: Very shortly after the announcement of Verizon's acquisition of Yahoo, two things happened that caught my attention. First, I was sent an email that basically said "these are our new Terms of Service and if you don't agree to them, you have until June 8th to close your account". Subsequently, I noticed that when working in my mailbox via the browser, I kept seeing messages in the status bar saying "uploading..." and "upload complete". I understand that Y! has started advertising heavily in the webmail app but I find these "uploads" disturbing. I've since broken out a pop client and have downloaded 15 years worth of mail and am going through to ensure there are no other online accounts tied to that address. My question to slashdotters is this: "What paid or free secure email service do you recommend as a replacement and why?" I'm on the hunt for an email service that supports encryption, has a good Privacy Policy, and doesn't have a history of breaches or allowing snooping.

208 of 322 comments (clear)

  1. Take Marissa's advice by OffTheLip · · Score: 5, Funny

    Use gmail.

    1. Re:Take Marissa's advice by Anonymous Coward · · Score: 5, Insightful

      Gmail is great in terms of reliability, spam filtering (best I've found), and features. But if you're looking for privacy, the only company that's probably worse in my mind is Facebook.

    2. Re:Take Marissa's advice by lgw · · Score: 2

      Take Marissa's advice
      Use gmail.

      I'd stick with one of the big providers, if you're going to use web mail at all. I switched from gmail to outlook.com, partly to live a Google-free life, but mostly because the gmail UI kept getting worse and worse. But certainly the latter is subjective, as is one's tolerance for an all-intrusive panopticon.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    3. Re:Take Marissa's advice by SpaghettiPattern · · Score: 2, Insightful

      I switched from gmail to outlook.com, partly to live a Google-free life...

      Out of the frying pan into the fire.

      --

      I hadn't the slightest objection to his spending his time planning massacres for the bourgeoisie... (P.G. Wodehouse)
    4. Re:Take Marissa's advice by mysidia · · Score: 2

      Gmail is great period. Regarding privacy; I think their major advantage is they are HONEST, where some of the other more egregious offenders are more concealed.

      You DO have privacy in the sense that your neighbor and random people at Google cannot look at your E-mail.
      You don't give a whole lot up, Although we do know they WILL collect keywords in your e-mail and use it to build a statistical model about you.

      If that concerns you, then your best option is to SELF-HOST your E-mail on your own server or purchase a Paid service, such as Office365 or ZohoMail.

    5. Re:Take Marissa's advice by CronoCloud · · Score: 2

      I switched from gmail to outlook.com, partly to live a Google-free life, but mostly because the gmail UI kept getting worse and worse.

      What is this "Gmail UI" you speak of? My Gmail UI on the desktop looks like this:

      http://www.claws-mail.org/scre...

      In other words, I have a hard time understanding complaints about the Gmail UI since people DON'T have to use it. That's what IMAP is for, so you can use Gmail with a proper e-mail client.

      You also don't see ads that way AND that enables you to archive locally if you want and use your choice of secure e-mail methods (PGP or S/MIME).

    6. Re:Take Marissa's advice by lgw · · Score: 2

      Microsoft isn't a panopticon. They don't mine your browsing habits, search history, email, phone location history, etc the way Google and Facebook do. Perhaps just lack of competence to do so.

      Google knows your age, race, religion, where you live, where you work, you're sexual preference, your income, your political views, and so on. All in databases the government can take control of at their whim (the government doesn't need their own Muslim database).

      --
      Socialism: a lie told by totalitarians and believed by fools.
    7. Re:Take Marissa's advice by salnikov · · Score: 1

      gmail have very special IMAP implementation (as gmail does not have folders on server side) which has some quirks and may not work very well with every proper IMAP clients.

    8. Re:Take Marissa's advice by edx93 · · Score: 1

      Second. I've used gmail since 2010 (I think) and you know what? I still use it on a daily basis. It's packed with features, integrates well with devices and apps and, best of all, it's not Yahoo! :-) the only downside is the whole privacy thing. But, then, privacy is dead.

    9. Re:Take Marissa's advice by farble1670 · · Score: 1

      Google knows your age, race, religion, where you live, where you work, you're sexual preference, your income, your political views, and so on. All in databases the government can take control of at their whim (the government doesn't need their own Muslim database).

      Has the govt taken control of their DBs? No.
      Would they like to take control of Google's DBs? Yes.

      Ergo, they are not able to do so.

      Could it happen? Sure.
      Could any data store be hacked and stolen? Yes
      Is Google less secure than any other of the thousands of data stores that contain your personal data? You decide (hint: no).

    10. Re:Take Marissa's advice by lgw · · Score: 1

      Ergo, they are not able to do so.

      Could it happen? Sure.

      You contradict yourself.

      They are certainly able to as they have more guns than Google. That's how you do threat modeling. They currently choose not to (perhaps because thNSA already has all the data? Hard to know.)

      If we keep the sort of government we don't have to fear, then all is good. But if the government goes full totalitarian (and we're really not that far off), suddenly everything changes.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    11. Re:Take Marissa's advice by Calydor · · Score: 4, Insightful

      Thirded.

      Had GMail since it was invite-only, and yes - Google will scan your email for advertisement, but if all you use it for is forum updates, Slashdot notifications, signing up for games etc., then what are you honestly afraid they'll find?

      I know this borders on the whole "If you have nothing to hide" mentality, but seriously, it's email. If you're sending sensitive information, use a different MEDIUM, not a different PROVIDER.

      --
      -=This sig has nothing to do with my comment. Move along now=-
    12. Re:Take Marissa's advice by swillden · · Score: 4, Informative

      Gmail is great in terms of reliability, spam filtering (best I've found), and features. But if you're looking for privacy, the only company that's probably worse in my mind is Facebook.

      What do you mean, specifically, by privacy?

      If you want to keep your family, friends, neighbors, etc. out of your email, then Gmail is great. Security is excellent, especially if you enable two-factor.

      If you want to keep random hackers out of your email, then Gmail is great. Security is excellent, especially if you enable two-factor.

      If you want to keep your ISP out of your email, then Gmail is great. It uses TLS connections for all client communications, and also with whatever other email servers it talks to that support it. Gmail-to-gmail communications is definitely encrypted all the time, both in transit and in storage.

      If you want to keep the FBI/Police out of your email, then Gmail is as good as any US-based email provider can be. They all have to provide data in response to proper subpoenas and warrants, and Google's lawyers scrutinize requests carefully.

      If you want to keep the NSA out of your email, then it's hard to say, but I suspect Gmail is quite good. Snowden revealed that the NSA was tapping Google's internal fiber, but Google has since moved to comprehensive point-to-point encryption. It's not completely impossible that the NSA has compromised the key management system that enables that, but it's actually pretty unlikely. I would assert that on this measure Gmail is as good as any large US-based email provider can be. Smaller ones may slide by the NSA because they're not interesting... but if they do become interesting they'll almost certainly be easier to pop than Google is.

      (As an aside: If the NSA is targeting you specifically for surveillance, as opposed to just sweeping you up in the dragnet, you should just give up on electronic communications entirely.)

      If you want to keep Google's advertising profile analytics software out of your email, then Gmail is awful. Your email will be scanned by systems that try to work out what you might be interested in buying, and this data will be correlated with web searches (if you don't have web history disabled), and data from other Google products. The resulting information will be used by Google (not by advertisers; they don't get access to the treasure trove) to show you ads for things you might want to buy, instead of things that you almost certainly don't want to buy.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    13. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      LOL @ NSA. It's not quite as bad as all that. My biggest concern is all of the unreported or belatedly reported breaches. Supporting encryption and having a good Privacy Policy are important as well.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    14. Re:Take Marissa's advice by swillden · · Score: 1

      LOL @ NSA. It's not quite as bad as all that. My biggest concern is all of the unreported or belatedly reported breaches. Supporting encryption and having a good Privacy Policy are important as well.

      Nice to know that you're sane :-)

      Seriously, so many of these conversations end up dominated by people who are worried about government data dragnets which (though wrong, and which should be shut down via the democratic processes) really have no relevance to them.

      Based on the stated requirements, I think Gmail really is an excellent choice for you. No one is as aggressive as Google about pushing encryption everywhere, and Google's privacy policy is pretty reasonable. Yes, they'll advertise to you. Big whoop.

      I would second what someone else said, though: To keep your options open, register a domain for yourself (not free, but pretty cheap). From a security perspective, the best way to handle it is then to pay Google $50 per year (oops, not free) to host your domain mail directly. Second best is to set up a forward (many domain registrars offer this service) to Gmail... and make sure that the forwarding system supports SSMTP, to keep your email encrypted in transit. Having your own domain means that when you decide you need to move again, you can without having to go through the pain of giving everyone a new email address.

      Full disclosure: I work for Google. I think I'm able to offer a pretty unbiased analysis, though, and I try to do exactly that.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    15. Re:Take Marissa's advice by farble1670 · · Score: 1

      Could it happen? Sure.

      Sorry, let me make it clear. Can they now, legally, and without repercussions? No. Could they in the future? Of course, because it's the future and I'm not currently able to foretell it. Also, ETs might land and exterminate folks who's shopping habits indicate they've shown no interest in the movie "ET" nor the Atari video game "ET".

      If we keep the sort of government we don't have to fear, then all is good. But if the government goes full totalitarian (and we're really not that far off), suddenly everything changes.

      Nah, I'm good. Not being a narcissist, I understand that the fact that my shopping habits indicate I'm interest in teeth whitener and that I find Yoko Littner sexy aren't going to be enough to single me out for execution under the New Order.

    16. Re:Take Marissa's advice by gbjbaanb · · Score: 1

      Use Protonmail, quite like Gmail in the main but private and no ads.

    17. Re:Take Marissa's advice by fustakrakich · · Score: 1

      As for privacy, just try to find some from anybody that you can verify. Bet you can't...

      --
      “He’s not deformed, he’s just drunk!”
    18. Re:Take Marissa's advice by Gavagai80 · · Score: 2

      It's actually shocking how little google knows. I've made no attempt to hide anything from them, but when I check what they think my advertising preference interests are, they've got so many things absurdly wrong.

      --
      This space intentionally left blank
    19. Re:Take Marissa's advice by Sporkinum · · Score: 1

      If you want to keep Google's advertising profile analytics software out of your email, then Gmail is awful. Your email will be scanned by systems that try to work out what you might be interested in buying, and this data will be correlated with web searches (if you don't have web history disabled), and data from other Google products. The resulting information will be used by Google (not by advertisers; they don't get access to the treasure trove) to show you ads for things you might want to buy, instead of things that you almost certainly don't want to buy.

      You make some good points, and with the standard noscript and adblocking setups, this last point is pretty much moot.

      --
      "He's lost in a 'floyd hole"
    20. Re:Take Marissa's advice by networkBoy · · Score: 1

      Second best is to set up a forward (many domain registrars offer this service) to Gmail... and make sure that the forwarding system supports SSMTP, to keep your email encrypted in transit. Having your own domain means that when you decide you need to move again, you can without having to go through the pain of giving everyone a new email address.

      Full disclosure: I work for Google. I think I'm able to offer a pretty unbiased analysis, though, and I try to do exactly that.

      Exactly what I do.
      I manage my email address blacklist on my end. All emails to a particular domain go to me, unless they're blacklisted so I can give out BigBoxStore@domain.com to BigBoxStore and if I start getting spam to that address I then redir it to :blackhole: and never see mail from them again. Next time they need an email I give them BigBoxStor.spams.too.much@domain.com

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    21. Re:Take Marissa's advice by networkBoy · · Score: 1

      glad you used the NOT OR, had you used AND then we'd be left with no population at all...

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    22. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      This is helpful.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    23. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      I am not sure what you're getting at, here.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    24. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 2

      This is satire, right?

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    25. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      Couldn't help but snicker at this just a little.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    26. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      gmail have very special IMAP implementation (as gmail does not have folders on server side) which has some quirks and may not work very well with every proper IMAP clients.



      I agree that "special" is a good word to describe it.
      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    27. Re:Take Marissa's advice by ma1wrbu5tr · · Score: 1

      Good to know about the VPN. I already have a paid VPN sub but when renewal time comes around, I shop around.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    28. Re:Take Marissa's advice by lgw · · Score: 2

      The sad thing is, Stalin's regime shows that just about anything can be deemed after the fact to be anti-social and grounds for execution. The less there is on record about me, the better, even if the government never cares about me specifically.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    29. Re:Take Marissa's advice by mjwx · · Score: 2

      Thirded.

      Had GMail since it was invite-only, and yes - Google will scan your email for advertisement, but if all you use it for is forum updates, Slashdot notifications, signing up for games etc., then what are you honestly afraid they'll find?

      I know this borders on the whole "If you have nothing to hide" mentality, but seriously, it's email. If you're sending sensitive information, use a different MEDIUM, not a different PROVIDER.

      I'm not worried about Google, they're the only free mail service that gives you a reasonable assurance that the data they sell is anonymised (I don't trust any mail provider not to be selling my data unless I control it). For anyone who I think is going to abuse my email, they get a hotmail address I've had since 1998. Nothing but spam or pron site password resets go there now. I have got a 4 letter hotmail address.

      The biggest problem with GMail is that its nigh upon impossible to get a unique address now (one of the reasons MS changed Hotmail to Live.com then Outlook.com). If you want anything resembling your name it's going to be contorted with numbers, dashes, dots and special characters. I got my Gmail account in 2005, so I've got (firstinital)(lastname)@gmail.com but I'll never get anything like that now even with my rare surname.

      If you want something that's not Frank.Avelone1987-2_b52-no-really-its-Frank@gmail.com or to keep an iron-fisted, paranoid control over your data, you need to run your own mail server.

      That being said, I'm surprised people are still using Yahoo! for anything that matters. The last Y! hold out I knew gave up in 2009 and just started using Gmail. Even then he struggled to get his very uncommon name @gmail.com.

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
    30. Re:Take Marissa's advice by CronoCloud · · Score: 1

      Oh? While I know Gmail over IMAP with a real e-mail client isn't perfect, it's much better than using a web browser and there a plenty of e-mail clients to choose from. I currently use Claws-mail, but I've used sylpheed, Thunderbird (even going back to the Minotaur days), and Kmail.

      On mobile I use k9 mail.

    31. Re: Take Marissa's advice by mjwx · · Score: 1

      That might be the nice reason they gave but the real reason why they changed hotmail is because of the god awful poor reputation it had by 2005 for spam. Its the same reason why they changed the name of internet explorer and they dont advertise the microsoft brand name prominantly on their xbox console and console boxes. Even their email program (outlook express) has gone through a dozen odd name changes because of its poor reputation.

      Hence I said "one of the reasons". Also, Live.com didn't have the same problem, that was a marketing "harmonisation".

      --
      Calling someone a "hater" only means you can not rationally rebut their argument.
    32. Re:Take Marissa's advice by 914 · · Score: 1

      sneakemail.com has an excellent service for exactly this.

      They auto-generate unique email addresses which can be used bi-directionally, without ever exposing your 'real' address.

      It's very useful for your BigBoxStore@domain.com example, and once abuse on the address begins you can blackhole it, set to auto-reject or your choice of return error.

      Also, you don't have to setup the addresses individually. You create a code like "nwb123" and then simply use an address like Bigboxstore-nwb123@sneakemail.com as your signup address. The confirmation will come through to your regular email, and so will password resets etc.

      I like this system since it becomes obvious when (and by whom) my email address is sold or stolen. Delta.com hasn't produced a spam email yet in--- like ten years?

      source: i use and pay the modest cost for the sneakemail service. love it

    33. Re:Take Marissa's advice by Darinbob · · Score: 1

      AT&T uses it as the webmail service for its customers.

    34. Re:Take Marissa's advice by sydbarrett74 · · Score: 1

      ProtonMail is a good option for individuals. Unfortunately, they don't yet have offerings that are suitable for business/enterprise users. They have promised to add additional service tiers in future, however.

      --
      'He who has to break a thing to find out what it is, has left the path of wisdom.' -- Gandalf to Saruman
    35. Re:Take Marissa's advice by gustygolf · · Score: 1

      If you want to not hand over your phone number to Google, then GMail is...

      (The damn thing keeps bugging me to add one.)

      --
      "Slow Down Cowboy! It's been 58 minutes since you last successfully posted a comment" -- slashdot, driving users away.
    36. Re:Take Marissa's advice by schleimkeim · · Score: 1

      Facebook worse than google in terms of privacy? Oh boy...

    37. Re:Take Marissa's advice by swillden · · Score: 2

      If you want to not hand over your phone number to Google, then GMail is...

      (The damn thing keeps bugging me to add one.)

      But you don't actually have to, right?

      FWIW, the reason it wants a phone number is for a recovery method in case you lose your password. That may not be a concern for you, but it happens to huge numbers of users and when it happens it generates significant costs for Google, since other last-ditch account recovery methods all involve an employee's time.

      That said, yes, if you don't want to provide a phone number, then GMail is annoying. That issue never occurred to me, because I don't have a problem providing my phone number, so I haven't seen the nags.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    38. Re:Take Marissa's advice by swillden · · Score: 1

      Oh, I forgot to mention that "lose your password" doesn't necessarily mean "forget your password". It also happens that someone guesses your password, gets into your account, and changes it to lock you out. Having a recovery phone number allows you to retake control, change the password and lock them out.

      Do you have 2FA enabled? It wouldn't surprise me if enabling that stopped the nags, since it reduces the probability of account lockout, particularly if you log in frequently (and therefore are unlikely to forget your password).

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    39. Re:Take Marissa's advice by gustygolf · · Score: 1

      If you want to not hand over your phone number to Google, then GMail is...

      (The damn thing keeps bugging me to add one.)

      But you don't actually have to, right?

      I think that is right. I can bypass the nag, but it's still a nag on every web log-in.

      I log in via IMAPS practically all the time, so I don't see the nag often.

      Actually, I just tried logging in via HTTP and I got a "please fill in your backup e-mail or phone number" screen which I could not exit since I hadn't JS enabled, but I opened https://mail.google.com/ via the location bar and there I was, logged in.

      (I also learnt that my backup e-mail address was on a provider that shut down a decade ago...)

      What I don't know is, whether I am allowed to register a new GMail account without providing a phone number. I think it was bypassable the last time I did it (but hidden pretty well). I haven't tried in a while.

      Sorry for the rambling.

      --
      "Slow Down Cowboy! It's been 58 minutes since you last successfully posted a comment" -- slashdot, driving users away.
    40. Re:Take Marissa's advice by mysidia · · Score: 2

      I'm curious, why does this data collection by Gmail NOT bother you?

      Why should it bother me? I and most people already use Google search, so they have a great many potential opportunities to collect data.

      Because my data is on their servers anyways: As far as I'm concerned Google is considered a trusted party.
      If their security practices as a company are not sound, then their E-mail servers can be compromised, and then my RAW data is out in the hands of adversaries,
        SO trust is implicit. Once trust is established, it doesn't really matter if they collect some aggregate statistics internally. Most providers do, even if their privacy policy clauses allowing the activity are more subtle.

      Yes Google collect aggregated data and build statistical models about me, then use predictions from the machine learning algorithms to decide what
      ads to display.

      But why should any of that concern me? It's data security and protection of the RAW data that could be used by hackers that is important.

      And I feel that Google's security practices are top notch ---- as a purveyor of revenue-generating services based on analysis: Google as a company knows how valuable data can be competitively, so they have more reasons than most companies to aggressively protect customers' data.

      Also; I feel I can't trust Yahoo, or some small No-Name mail provider, Because they slip under hackers' radar. What says a lot is when you have a company that is a Huge high-value target for hackers, And a history of pretty much zero security breaches.

    41. Re:Take Marissa's advice by houghi · · Score: 1

      I use my own domain with the pop from my provider. The provider is small enough that they won't wasting money to look in my emails. They will not have enough financial reason to do so.

      I run my own web interface for mail on my home webserver. So no mail server configuration.

      I have also used GMX for mail, if not for anything else, because it isn't Gmail, or Hotmail or Yahoo.

      I also am always assuming that what happens on the Internet is known. No secrets. That is easier than to assume there might be things that are and then find out they are not.

      --
      Don't fight for your country, if your country does not fight for you.
    42. Re:Take Marissa's advice by swillden · · Score: 1

      AFAIK, policy has not changed and phone number isn't required for new accounts, though I couldn't guarantee it. Another option for bypassing the nag is just to stay logged in all the time. You may also consider adding 2FA; there is a logical security reason why that might suppress the nag. I don't know if it does, though.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    43. Re:Take Marissa's advice by Reziac · · Score: 1

      This is why I only use GMail for Google-related stuff: Groups, Youtube, and the like. I figure Google already has everything they want to know about me from that anyway, so no harm done and keeps the fluff out of my other mailboxes. And I only use it via POP3 so I never have to deal with the interface.

      Otherwise...

      GMX for free-and-reliable. (Can also do POP3.) Owned by 1&1.

      I know people using Protonmail (for encrypted) and POBox.com without complaint.

      Another option is to buy your own domain and use it with mail-only hosting. IIRC, 1&1 offers that for something like $1/month. (I have my main hosting there and mostly use my domains for email anyway, and that gives me more mailboxes than I can use.)

      But if you want reliable above everything else, nothing beats Earthlink. This is why I still pay for an Earthlink dialup account (tho I no longer need the connection) -- and I've done years of CC: comparisons with multiple email hosts.

      BTW Yahoo still has that issue with email intermittently vanishing without a trace -- no error, no nothing, sometimes for months on end -- that's been an ongoing problem since at least 1998.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
    44. Re:Take Marissa's advice by gustygolf · · Score: 1

      AFAIK, policy has not changed and phone number isn't required for new accounts, though I couldn't guarantee it. Another option for bypassing the nag is just to stay logged in all the time.

      Heh, my browser is set to auto-clear all cookies on close, so any 'remember-mes' don't work for long Also, I don't care for Google recording my search history so I definitely don't keep logged in if at all possible.

      You may also consider adding 2FA; there is a logical security reason why that might suppress the nag. I don't know if it does, though.

      Aaand I just read Google's page on that, and learnt that the feature requires a phone number which we're kind of trying to avoid =)

      --
      "Slow Down Cowboy! It's been 58 minutes since you last successfully posted a comment" -- slashdot, driving users away.
    45. Re:Take Marissa's advice by swillden · · Score: 1

      You may also consider adding 2FA; there is a logical security reason why that might suppress the nag. I don't know if it does, though.

      Aaand I just read Google's page on that, and learnt that the feature requires a phone number which we're kind of trying to avoid =)

      That's only if you use SMS as the 2FA method. Use the Authenticator app instead. Or a security token (e.g. Yubikey nano).

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    46. Re:Take Marissa's advice by cthulhu11 · · Score: 1

      If you want to use OSX Mail.app, then Gmail is a crapshoot.

    47. Re:Take Marissa's advice by swillden · · Score: 1

      Why is that? Does Mail.app not support IMAP4 properly?

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    48. Re:Take Marissa's advice by q4Fry · · Score: 1

      One can't add an arbitrary 2FA scheme to Google without a phone number. Is this because Google doesn't trust me to keep track of my actual 2FA setup and wants to give me a recovery option? Or do they just want my phone number?

      I would love to be mistaken. If there's a way to get around this, please let me know.

    49. Re:Take Marissa's advice by swillden · · Score: 1

      One can't add an arbitrary 2FA scheme to Google without a phone number.

      Hmm. It used to be possible. Maybe it's not any more.

      Is this because Google doesn't trust me to keep track of my actual 2FA setup and wants to give me a recovery option?

      If you really can't do it without a phone number, that's probably part of the reason. I mean, if you use the Authenticator app and then drop your phone in the toilet you will lose access to your account. You can (and should!) print out recovery codes, and store them safely, but if they and your phone are in your house and it burns down...

      Personally, I have a couple of security keys as my primary 2FA methods, plus the Authenticator app on my phone, plus two backup phone numbers (mine and my wife's), and recovery codes printed and stored in two places (one in the safe in my house and one in my dad's safe at his house). You may required less redundancy :-)

      Anyway, I tried to test setting up 2FA without a phone number myself, and couldn't. I don't have any gmail accounts that don't already have a phone number (and don't already have 2FA), so I tried to create a new one... and it looks like it's now impossible to create a new gmail account without entering a phone number. Thinking about it, I suspect that's an anti-abuse measure.

      Last year, the Google abuse team reached out to me to ask me to add some features to Android that they can use to limit the ability of people to use Android devices to create large numbers of gmail accounts. They explained that people creating and selling thousands of gmail accounts to fraudsters is a big problem, both for the fraud and the blowback on Google that it creates. I don't know but suspect that they probably imposed the requirement that all new accounts verify a phone number (well, probably all new accounts in geographies where it's reasonable to do so) as one way to limit mass account creation.

      The same logic doesn't apply to already-existing accounts, but the presence of a verified phone number may be a signal in other abuse- and security-related decision processes, since it's a moderate indicator that the account owner is a real person.

      Or do they just want my phone number?

      What would they do with your phone number? They're not going to call you.

      If there's a way to get around this, please let me know.

      Well, you could give them someone else's phone number :-)

      Actually, in all seriousness, if you're worried about the number being used to correlate data with some other source, why not confound it by using a number of someone who is not you and with whom you don't have a particular relationship? Use a payphone, if you can find one. Then after you've set up your preferred 2FA (and printed out some recovery codes to keep in a safe place), remove the number from the account so it can't be used as a 2FA.

      I was able to remove the phone number from one of my accounts. Then when I signed in from an Incognito window (using 2FA), I was able to log into gmail without any nag about adding a phone number, so I suspect that approach works.

      Honestly, though, I'd recommend using your real phone number and leaving it on there as an account recovery option.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  2. Run your own by Z00L00K · · Score: 5, Insightful

    Run your own mail server, that's the only way you can be reasonably sure that you have control over your mail.

    --
    If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
    1. Re:Run your own by Anonymous Coward · · Score: 5, Funny

      Run your own mail server, that's the only way you can be reasonably sure that you have control over your mail.

      I second what Hillary says.

      (Is it a stretch to mention the captcha is 'dwelling', as in run your own server in your dwelling?)

    2. Re: Run your own by Anonymous Coward · · Score: 4, Informative

      "Sure?"

      Running a good, reliable mail server yourself is hard to do well. Doing good spam filtering is harder. Being secure/hackproof, harder still.

      Running your own server if you're an amateur is a terrible idea.

      Sure, you COULD spend a huge amount of time learning how to do this well, and a lot of time keeping up with patches an maintainence. But it's likely the highest cost option if you value your time at all.

    3. Re:Run your own by unixisc · · Score: 1

      Of course. Everybody is a whiz at Sendmail, Dovecot and the like. But it sure beats having your email in 'the cloud'!

    4. Re:Run your own by captaindomon · · Score: 1

      Running your own server doesn't ensure you have control over your email. In fact, unless you have hired, 24x7 technicians you trust, and are running it in a hardened data center you built yourself, etc. you probably have more leaks to your server to bad actors than you do using one of the big providers.

      --
      Just because I can hook a shark from a boat, I do no offer to wrestle it in the water.
    5. Re: Run your own by gbjbaanb · · Score: 1

      Nothing is hackproof but running your own email server is a sensible option if you're half way competent. Just remember to make backups.

      Arstechnica had a series on how to do it and why they chose the options they did. Quite informative:

      https://arstechnica.com/inform...

    6. Re:Run your own by ma1wrbu5tr · · Score: 1

      LOL. I thought the same thing.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    7. Re: Run your own by KGIII · · Score: 1

      Hmm...

      Do you know how easy it is to maintain a Linux box? It's pretty easy. As in, open terminal, press up arrow, press enter, type password, press enter, press Y, press enter, done.

      You don't defrag. You don't clean a registry. You don't use antivirus. Your whole system is updated, with just that. You just press up until you get the update command from the last time you used it. It's not magic. It's not hard. Unless you're deliberately difficult, it'll update the whole damned system for you.

      Hell, here... For the most common...

      sudo apt-get upgrade

      (No, it really is upgrade, not update. Update does something else. When you enter your password, nothing will show on the screen - not even asterisks. This is the expected behavior.)

      Tada!

      --
      "So long and thanks for all the fish."
    8. Re: Run your own by manu0601 · · Score: 1

      Doing good spam filtering is harder.

      For small to average sites, Greylisting is very effective at removing spam.

      The fact that it does not scales well to huge sites is probably why spammers do not spend much work fighting it

    9. Re: Run your own by robot5x · · Score: 1

      I did exactly this recently. Swapped ~10yrs worth of gmail for a digital ocean droplet at $10/month, and now have a well-functioning email service I can get on desktop and phone and has been really easy to maintain after setup.

      Despite being a competent linux user there is some pretty arcane shit required in setting up postfix etc, and it took me a LONG time to nut it out. I started with the arstechnica piece quoted above but this was easily the most useful guide I came across (my VPS is debian 8).

      --
      Hej! Nasi tu byli!
    10. Re: Run your own by schleimkeim · · Score: 1

      What do you even do on a tech news site? "Aww it's too hard. You shouldn't even try it. waaah waaah". People like you are the reason this whole industry is going to shit.

    11. Re:Run your own by thegarbz · · Score: 1

      I run my own mail server. I find that in general I give up a lot of control over the ability for my emails to reach their intended target. Seriously it's about the most painful thing on the internet, between entire ISPs blacklisted, domain black listing, keeping up with the requirements to stay off black lists etc.

    12. Re:Run your own by x_t0ken_407 · · Score: 1

      I second this. I still have a GMail account (unfortunately), however everything I can help goes to my private email server (FreeBSD/postfix/Maia ftw).

  3. None by 110010001000 · · Score: 5, Insightful

    People are REALLY going to hate this, but there is no 100% secure network service. Computer networks were designed for sharing information between nodes. The idea of keeping others out of that sharing was added on later. On a large interconnected network like the Internet it is impossible to do 100%. I can feel the nerd rage boiling here and the claims that "you don't know what you are talking about!". But save it. Reality tells us otherwise. If it is on a network, it isn't secure.

    1. Re:None by Drethon · · Score: 1

      People are REALLY going to hate this, but there is no 100% secure network service. Computer networks were designed for sharing information between nodes. The idea of keeping others out of that sharing was added on later. On a large interconnected network like the Internet it is impossible to do 100%. I can feel the nerd rage boiling here and the claims that "you don't know what you are talking about!". But save it. Reality tells us otherwise. If it is on a network, it isn't secure.

      This, the only truly secure network device has been disconnected form the network. The most secure network devices make it very difficult for the authorized user to access the system and extremely difficult for anyone else to access. Just about everything a network device does to make it easier to access and use just makes it less secure.

    2. Re:None by 110010001000 · · Score: 1

      It is completely relevant. I don't recommend any paid or free secure email service because there isn't any.

    3. Re:None by WillAffleckUW · · Score: 1

      This is a correct statement. Even non-networked airgap isn't secure.

      But we have to work for it then.

      --
      -- Tigger warning: This post may contain tiggers! --
    4. Re:None by headhot · · Score: 1

      Google has been pretty good about discussing compromises and offering a host of 2FA techniques. Google is in no means 100% transparent, but after the Chinese hacking attack on dissidence, and the Snowden stuff, Google has stepped up on security options and access notifications.

    5. Re:None by JustAnotherOldGuy · · Score: 1

      People are REALLY going to hate this, but there is no 100% secure network service.

      For once, Binary Bro is correct. (Statistically it had to happen sooner or later.)

      But it's true: there is no 100% secure network service, no matter whether you use an established provider like GMail or run your own private domain mail service.

      --
      Just cruising through this digital world at 33 1/3 rpm...
    6. Re:None by JustAnotherOldGuy · · Score: 1

      This, the only truly secure network device has been disconnected form the network.

      True, but that kinda rules out email as a thing.

      --
      Just cruising through this digital world at 33 1/3 rpm...
    7. Re:None by 110010001000 · · Score: 2

      Google is reading and scanning all your email. Give me a break.

    8. Re:None by 110010001000 · · Score: 1

      Wrong. I am always 100% correct. You must be thinking of my brother, 110011001000

    9. Re:None by trg83 · · Score: 1

      Yes, but they hate competition in doing so, so they try pretty hard to secure it from all other parties!

    10. Re:None by farble1670 · · Score: 1

      Google is reading and scanning all your email. Give me a break.

      Obviously if the author is coming from Y! Mail, this isn't their concern. They are asking about security from 3rd parties. So yes, contrary to your snide remark, discussions about 2FA and security notifications are relevant here.

    11. Re:None by infolation · · Score: 1

      This, the only truly secure network device has been disconnected form the network.

      Data can be exfiltrated with fan noise, blinking lights, leaked radio emissions, thermal pings. Even loud ultrasonic noise that's picked up from windows with laser-mics. Even a switched off computer (via Intel ME)

      After reading about these marvels of human ingenuity, there doesn't seem to be a way of protecting computers under any circumstances. Just live in a desert and grow chickens or something.

    12. Re:None by Drethon · · Score: 1

      Good points, at this rate it probably wont be long before technology just reads your thoughts from hundreds of miles away...

    13. Re:None by Drethon · · Score: 1

      This, the only truly secure network device has been disconnected form the network.

      True, but that kinda rules out email as a thing.

      Well you can move data on external drives, but now your security is open to viruses so...

    14. Re: None by KGIII · · Score: 1

      Right? She just leaks NSA data.

      --
      "So long and thanks for all the fish."
    15. Re:None by ma1wrbu5tr · · Score: 1

      Yes. I get this. But there are steps one can take to limit security risks. Having an email provider that gets hacked and doesn't tell you isn't one of them.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    16. Re:None by JustAnotherOldGuy · · Score: 1

      Well you can move data on external drives, but now your security is open to viruses so...

      Plus it sort of negates the utility of email itself.

      Truly sometimes all we have are bad choices, and we just have to pick the least-worst one that we can.

      Frankly my life is so drama-free and law abiding that I'd be downright flattered if anyone wanted to root around in my emails. It'd be like taking Ambien in a text format.

      --
      Just cruising through this digital world at 33 1/3 rpm...
  4. Don't Match by ZiakII · · Score: 5, Insightful

    has a good Privacy Policy and free

    Don't match in my experience.

  5. Email the wrong tool for privacy by DickBreath · · Score: 5, Insightful

    If you want privacy, isn't email the wrong tool? Isn't email like a post card that anyone can read in transit?

    If you want private communications, look for a different way, a private way, to communicate.

    If you want convenient email for casual use, try GMail. For example, Google will find things in your email, like confirmation emails of your upcoming flights, and then Google will be sure to remind you on your smart phone. But I don't treat communication with my airline the same as I might treat communication with other parties.

    --

    I'll see your senator, and I'll raise you two judges.
    1. Re:Email the wrong tool for privacy by tepples · · Score: 1

      If you want privacy, isn't email the wrong tool? Isn't email like a post card that anyone can read in transit?

      Mail in a PGP or S/MIME envelope can't be read in transit.

      If you want private communications, look for a different way, a private way, to communicate.

      Someone supporting a product, service, or free software project still needs some means for users to contact him. What's the private way to provide support to members of the public? A web-based issue tracker would still need email so that users can log in without a password, such as when resetting a forgotten or compromised password.

    2. Re:Email the wrong tool for privacy by jader3rd · · Score: 1

      Isn't email like a post card that anyone can read in transit?

      Most email servers connect to each other via an encrypted channel. So the emails aren't in plain text whilst in transit.

    3. Re:Email the wrong tool for privacy by swillden · · Score: 1

      Isn't email like a post card that anyone can read in transit?

      Most email servers connect to each other via an encrypted channel. So the emails aren't in plain text whilst in transit.

      Unfortunately it's really not "most email servers", but only "some email servers". Most all of the big ones do use SSMTP, though, so most email is transferred via an encrypted channel.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    4. Re:Email the wrong tool for privacy by tepples · · Score: 1

      an e-mail exchange with a drug dealer flags you

      Flags me as what? A valued Walgreens customer?

  6. I'm just staying with Yahoo mail by jfdavis668 · · Score: 1

    I haven't had any issues. Unless they make major changes, I see no reason to move on.

    1. Re:I'm just staying with Yahoo mail by DickBreath · · Score: 2

      Same here. I won't be closing my hundreds of email accounts on Yahoo. I haven't used them in a decade. I see no reason to change them, close them, move them, or take any action whatsoever.

      When the big Yahoo email breach occurred, how many people had the following questions?
      1. I wonder how many of my email accounts (that I haven't used in years) are affected?
      2. I wonder what percent of the breached accounts are my email accounts that I haven't used in years?

      --

      I'll see your senator, and I'll raise you two judges.
    2. Re:I'm just staying with Yahoo mail by rmdingler · · Score: 1
      ATT/Yahoo email account.

      It should be interesting, if nothing else, since the new Overlord is an ATT competitor, and Verizon has been recently in the news shuttering up their own email activities.

      --
      Happiness in intelligent people is the rarest thing I know.

      Ernest Hemingway

    3. Re:I'm just staying with Yahoo mail by jfdavis668 · · Score: 1

      Yes, Verizon is moving their email accounts onto AOL servers.

    4. Re: I'm just staying with Yahoo mail by KGIII · · Score: 1

      I gotta ask.

      Hundreds?

      --
      "So long and thanks for all the fish."
    5. Re: I'm just staying with Yahoo mail by DickBreath · · Score: 1

      Yes. Really.

      Back in the day, there was no verification needed to create a Y! account. You certainly did not need a phone number.

      So you can imagine that the process could be scripted. Not that I'm suggesting that anyone would have ever done such a thing. Nosiree.

      Back in the day, when laughing at trolls on Y! SCOX message board, one could use a script that could use many accounts to vote down troll comments, effectively nuking them.

      Furthermore, you did not even need an HTTP POST operation to cause a downvote. Just a GET operation with all necessary parameters in the URL. And the right cookies to be "logged in" on an account that would be voting on the message.

      I'm not saying anyone would actually do such a thing. Definitely not. I'm just saying it would have been possible.

      Another bit of trivia from back when Yahoo had stock message boards. Sometimes Yahoo would delete an entire troll thread. If you knew the HTTP POST parameters for a normal reply to a message, you could reply to a specific message on a deleted thread topic. People could carry on conversations invisibly for months or even years on one thread. None of this would show up on the main forum page. Just sayin'. But I can't say that I know of anyone who would engage in such behavior.

      --

      I'll see your senator, and I'll raise you two judges.
    6. Re: I'm just staying with Yahoo mail by DickBreath · · Score: 1

      A minor correction. The replies WOULD show up on the main forum. But you couldn't read them by clicking on the link to the newly posted message. The only way to read the message was to know how to HTTP GET a page that was the equivalent of hitting the REPLY button. But you couldn't hit the reply button unless you could read the message. But if you knew the message ID from the link, and you knew how to mechanically form the URL for the reply button, you could get back the reply page, with the original message quoted, and a box to type in your reply. Sorry for not describing it correctly above. It was just so long ago. The Tardkopf thread went on for a very long time. It might have been more than a year. Possibly longer. It was amusing that people would talk about how there were replies to this deleted topic. But nobody could read them by clicking the links.

      But again, I can't imagine that anyone who would take advantage of how unbelievably poorly Yahoo's message forums were shoddily constructed.

      --

      I'll see your senator, and I'll raise you two judges.
  7. Well this is awkward by Anonymous Coward · · Score: 1

    If you are trusting someone else to manage your email, you will never be sure someone isn't reading your emails. Simple as that. I'd go with Google since they are at least open about what they do with your emails. Or at least as far as I know.... which is all you can say about any free or paid service.

    Now setting up your own email service isn't all that terribly hard. If you really care about your security, that is the way you will go. Otherwise, you just figure out who you distrust the least.

  8. Fastmail by ebonum · · Score: 5, Insightful

    Not free, but it works well. Note: Servers are in NY.

    1. Re:Fastmail by Anonymous Coward · · Score: 1

      Not free, but it works well. Note: Servers are in NY.

      anything american owned and hosted in america is compromised by default

    2. Re:Fastmail by thevirtualcat · · Score: 1

      I second this.

    3. Re:Fastmail by ma1wrbu5tr · · Score: 1

      Thanks for replying. I will check them out.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  9. Unseen.is - Encrypted e-mail by SilverSlimer · · Score: 1

    Don't bother with any free service which will basically allow for the always respectful, honourable, "authorities" to check your e-mail whenever they feel like it. Use encrypted e-mail through www.unseen.is.

  10. Try Proton Mail by Lord_Rion · · Score: 1

    ProtonMail out of Switzerland is pretty good and seems to be pretty secure.

    https://protonmail.com/

    --
    --Hired Net Grunt
    1. Re:Try Proton Mail by ma1wrbu5tr · · Score: 1

      Proton, Hushmail, and a couple others have made the short list. Thanks for reading and replying.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    2. Re:Try Proton Mail by thebes · · Score: 1

      Surprised it took this long in the discussion to come up. +1

  11. I use two by mhollis · · Score: 4, Interesting

    I use Apple for personal email. I have had a mac.com email address since Apple came out with it. Their current server name is "me.com" and Apple does not advertise in this service, as it is a paid-for service. It allows pop3 as well as IMAP.

    For professional email, I use gmail. Google does a great job of excising spam. It is advertiser-supported email, but I never use a web browser for my gmail account. Instead, I use the pop3 function. It propagates to my cell phone, my desktop and my tablet. When I delete something on my cell phone, it deletes on my tablet, but not on my desktop. For a free service, I do not think you can do any better than gmail.

    --
    Gods don't kill people, people with gods kill people.
    1. Re:I use two by swillden · · Score: 1

      It is advertiser-supported email, but I never use a web browser for my gmail account.

      I don't have any problem with the advertiser-supported email model, or with Google (I work for Google), but it's worth pointing out that these things you put together in one sentence are not related. Not using a web browser doesn't prevent gmail from analyzing your emails to identify your interests. It does prevent gmail from showing you ads in the webmail UI (aside: using Inbox does, too, since for whatever reason there are no ads in that Gmail UI), but if Google can correlate your email and other traffic (note that I have no idea to what degree this is done), then it can still use information learned from your emails to show you relevant ads when you surf other sites.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    2. Re:I use two by Yaztromo · · Score: 1

      I use Apple for personal email. I have had a mac.com email address since Apple came out with it. Their current server name is "me.com" and Apple does not advertise in this service, as it is a paid-for service. It allows pop3 as well as IMAP.

      You are way behind the times on this.

      Apple replaced the "me.com" domain with "icloud.com" back in October 2011. They continue to maintain the "mac.com" and "me.com" domain names, but only for those people who were members back when those domain names were in current use. If you sign up for an account with them today, you'll get an "icloud.com" address.

      And secondly, an iCloud e-mail account is free, and has been since October 2011 when they got rid of the monthly subscription fees that were previously applied to the .Mac and MobileMe services. Indeed, the only thing you can pay for now is extra storage space -- I believe you get 5GB of free storage space, but can pay a small monthly fee for more.

      You are correct about it being advertising-free, and the POP3 and IMAP support.

      Yaz

    3. Re:I use two by gdp007 · · Score: 1

      Same here. iCloud.com - consider Apple's strong stance on privacy. It's been a flawless experience for me.

  12. Re:Sad to go, But I'll be joining you by slaker · · Score: 1

    It's fairly trivial to export your messages. You can copy them someplace local via any IMAP client. Contacts from Yahoo aren't bad either, since it'll make a .CSV for you. Putting the messages back on another service isn't horrible once you have those things under your own control.

    --
    -- I wanna decide who lives and who dies - Crow T. Robot, MST3K
  13. Gmail + Thunderbird by Snotnose · · Score: 2, Interesting

    I've got 2 gmail accounts (no, snotnose@gmal.com is not one of them). I connect to them via Thunderbird, which downloads the messages to my local hard drive. It's worked like a champ for some 8 years or so.

    1. Re:Gmail + Thunderbird by Anonymous Coward · · Score: 2, Interesting

      Be careful, as Thunderbird DOWNLOADS all folders, emails, and attachments by default. Including your SPAM folder. One of our users had thunderbird and our AV system went nuts because it was downloading the trojan attachments to the spam emails.

      I did a little digging but there was not clear answer on stopping it from downloading attachments by default.

    2. Re:Gmail + Thunderbird by unixisc · · Score: 2

      I make sure it's an imap, rather than a pop3 connection, so that I don't lose what's online. Years ago, while on one of my Linux experiments, where I had KDE, I used Kmail once, and it acted only as a pop3 connection, and all my email was sucked up from the server. Later, when that hard disc got somehow corrupted forcing me to re-install, I lost all those emails.

    3. Re: Gmail + Thunderbird by KGIII · · Score: 1

      I kinda want to chide you about letting that be a lesson in learning good backup strategy. ;-)

      --
      "So long and thanks for all the fish."
    4. Re: Gmail + Thunderbird by unixisc · · Score: 1

      What is a good email backup strategy under either Linux or (in my case) TrueOS (in other words, FreeBSD)?

    5. Re: Gmail + Thunderbird by KGIII · · Score: 1

      Save to disk and include in your regular backups. That's my method. I rsync stuff and have a small script that automates it and also pushes it out over the network to a buddy's place, where there's a drive hanging off a computer setup there. I kinda sorta mostly try to swap 'em in and out, but disk space is so cheap that I am a bit lax. I'm pretty sure there's like 6TB of storage at his place, though not all filled.

      --
      "So long and thanks for all the fish."
  14. Fastmail by jeauxkewl · · Score: 5, Insightful

    Fastmail for the win. Reasonably priced, don't think they are going anywhere and have been ultra-reliable. I've been with them about 15 years.

  15. Won't matter to me by p51d007 · · Score: 1

    I've had a yahoo address so long, it still ends in @sbcglobal.net All I use it for is online garbage...let all the junk go there from sites that require an email address to do anything.

    1. Re:Won't matter to me by Bigbutt · · Score: 1

      Me too. My first "free" email account. I'd sent a joke out at work to friends and someone forwarded it to someone who didn't like it and complained to my boss. I popped out and snagged a rocketmail account and used that for my joke, and other things email. Then a yahoo account for one of my mailing lists for when I quit the job.

      [John]

      --
      Shit better not happen!
  16. Re:And you were with Yahoo?!?! by green1 · · Score: 2

    I think this is really the important bit.

    The OP obviously is looking for an email service that is completely different from the one they are migrating from, however expect that it will exist, and probably want it for approximately the same cost (near zero)

    I think this may be asking too much.

    For a good alternative to Yahoo mail, you could use Gmail, it has all of the same security issues as Yahoo but I don't think it is in any way worse (and arguably I do trust google more than I trust yahoo, though that doesn't say much) and gmail, simply due to it's popularity, does have a lot of functionality (either native, or third party) so there is that.
    Google also doesn't have much of a history of data breaches, and they seem to allow no more government snooping than any other company (which again doesn't say much)

  17. Marissa?? by Anonymous Coward · · Score: 1

    Is that you?

  18. Runbox.com by Gaygirlie · · Score: 2

    "has a good Privacy Policy, and doesn't have a history of breaches or allowing snooping." -- Runbox fits all of those. Norwegians have very strong laws regarding privacy, which should please you, and the company doesn't do any advertising or crawling through your emails for tracking or anything like that. It's not a free service nor is it the cheapest one available, but I've been their customer for several years and I would at least recommend one to take a look at their offerings.

    1. Re:Runbox.com by ma1wrbu5tr · · Score: 1

      Thank you. I hadn't run across that in my searches previously. Added to the short list for further investigation.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    2. Re:Runbox.com by Sir+Holo · · Score: 1

      "has a good Privacy Policy, and doesn't have a history of breaches or allowing snooping." -- Runbox fits all of those. Norwegians have very strong laws regarding privacy, which should please you, and the company doesn't do any advertising or crawling through your emails for tracking or anything like that. It's not a free service nor is it the cheapest one available, but I've been their customer for several years and I would at least recommend one to take a look at their offerings.

      How about anon.penet.fi?

  19. G Suite or Office 365 by JeffTL · · Score: 1

    I have used G Suite for several years - Gmail running my domain's email. I get even more storage than regular Gmail, no ads, and I can still access my mail as an Exchange account on my iPhone so I can get push mail on Apple Mail. Before that, I had a hosted Exchange account with GoDaddy that did the job alright. Today if I wanted to go the hosted Exchange route I'd probably just do Microsoft Office 365's business plans that include email - either the $5 one that just gives you Exchange and OneDrive, or the $12.50 version that gets you all the Office applications as well. It looks like Microsoft offers something called Exchange Online that is just email with no OneDrive, in a couple of flavors. Which way you go depends on how you feel about Google and Microsoft. Microsoft's solutions will naturally play better with Outlook, if that is important to you.

  20. Roll your own by RyoShin · · Score: 1

    I'm on the hunt for an email service that supports encryption, has a good Privacy Policy, and doesn't have a history of breaches or allowing snooping.

    You don't want any of the free offerings (like Gmail) then. As far as I know, every mail service that is free does snooping for advertising, whether it's directly in their web client or used elsewhere.

    I don't have any paid services to recommend (and even these may or may not come with data slurping) but you could always try rolling your own. Domain names are cheap ($10-$20/yr depending on who you get it through) and many domain registrars offer some sort of mail-setup that can vary greatly in price. GoDaddy is not a registrar I'd recommend, but for an example their e-mail service starts at $5/mo normally.

    You could also throw together your own mail server, but my understanding is that a lot of ISPs (in the US, which I presume is your country) are not happy with customers hosting anything regularly. Most shared website hosting plans come with some sort of e-mail service, but the abilities and prices can vary tremendously.

    Just know that if you roll your own you'll probably have to be a lot more hands on with things like spam, which can have varying degrees of annoyance depending on the method. With your own domain name you can also do neat things like per-registration routing (Gmail allows username+whatever@gmail.com, but a lot of sites don't accept that as a valid e-mail address) and it looks much better in business use. Having a site where you can host random things can also be handy from time-to-time.

    1. Re:Roll your own by SnarkSide · · Score: 2

      Running your own mail server isn't for everyone, but I'd say absolutely you have to own the domain if you want control. If someone else owns the domain that your account depends on, you have no control over the future of your own account. This is the fundamental error I made 18+ years ago when I started calling Yahoo my permanent email address and thinking only my employer addresses were transitory.

    2. Re:Roll your own by RyoShin · · Score: 1

      Indeed. I recall having a lot of problems when I used my .edu address for stuff in college and then graduated.

      For those that might be squeamish running their own, I believe Gmail offers a way to use its service with your own domain, but I don't know if that costs money (and they might still do data collection even if it does, which is why I didn't mention it in OP.) I imagine other e-mail providers offer similar options.

    3. Re:Roll your own by ma1wrbu5tr · · Score: 1

      I had previously ruled out the "Clinton Option" but you make a good case and bring up some ideas I hadn't considered. Thanks for replying.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  21. Use Gmail--and here is why by ebrandsberg · · Score: 4, Insightful

    The main issue with e-mail is that it has two parties involved. If either of the parties is compromised in a communication, then it doesn't matter how secure the other party is. Due to the sheer volume of people using Gmail, it is likely they already have a copy of most of your mail anyway. By using Gmail just like so many other people, you at least only have one system potentially snooping on you. If you believe that you are more secure using other systems, you are likely wrong.

    1. Re:Use Gmail--and here is why by Anonymous Coward · · Score: 2, Insightful

      That's a reason for nobody to use gmail, not a reason for everybody to use it.

  22. Your own website by Topwiz · · Score: 1

    You could create your own website and use the email services that come with the hosting package.

    1. Re:Your own website by tajribah · · Score: 1

      I still prefer having my e-mail dropped by sites with silly administrators to having random legitimate e-mail dropped by my GMail account just because GMail uses an over-paranoid spam filter which cannot be tuned to my needs.

  23. Re:Until Email transport security gets better.... by PPH · · Score: 1

    Never mind the transport. That will always be compromised. Depend on the security of the strongbox. Understand the motivations of the developer (spyware, compromised by the NSA, Chinese or both) and issues related to secure key exchange.

    --
    Have gnu, will travel.
  24. Email simply is not secure by buss_error · · Score: 1

    Look, email is not secure. Not at all. Any other way to thinking about it is a lie.

    You see, email has to connect with just anybody. That means you can't exchange email freely, you have to have an agreed security frame work if you want email to work. Even TLS is no real protection.

    That being said, I'll upload an ansible script to set up a multi-tenet mail config you can run on any linux cloud provider or you can use only of the many that are already around.

    --
    Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.
    1. Re:Email simply is not secure by therealspacebug · · Score: 1

      Yeah. Email should be seen as sending postcards. It's about that secure.

      It's pretty easy though to send and receive encrypted email using for example PGP.

  25. Prepare to land in the junk folder by tepples · · Score: 1

    Now setting up your own email service isn't all that terribly hard.

    Provided you're fine with all your outgoing mail ending up in the junk folder. Even with working SPF and DKIM, deliverability isn't certain if anti-spam measures on recipients' mail servers refuse to accept mail from IP addresses issued by a home ISP.

    1. Re:Prepare to land in the junk folder by Bigbutt · · Score: 1

      I have a remote server I rent. The real problem is the spam filtering isn't the greatest. I generally just create a site-specific address and filter that into a folder and ignore my main mail address feed. 99.9% of it is spam. I counted it up at one point and had about 250,000 spam messages that had been filtered over the course of a month. On top of that, even though I use key based access only, the last time I counted I had 1.2 million attempts to hack ssh over 30 days. I blocked all of Taiwan and installed fail2ban and configured it to permanently block repeat offenders. That dropped the hack attempts quite a bit.

      [John]

      --
      Shit better not happen!
    2. Re:Prepare to land in the junk folder by robot5x · · Score: 1

      but he didn't say he'll be using his home ISP did he?

      --
      Hej! Nasi tu byli!
    3. Re:Prepare to land in the junk folder by tepples · · Score: 1

      If you are trusting someone else to manage your email, you will never be sure someone isn't reading your emails.

      recipients' mail servers refuse to accept mail from IP addresses issued by a home ISP

      but he didn't say he'll be using his home ISP did he?

      No, but he implied it. If you're not using your home ISP, you're leasing some sort of service from someone. This necessarily involves some level of "trusting someone else to manage your email".

  26. Any relay server harvests your info by WillAffleckUW · · Score: 1

    It really doesn't matter what you do for privacy, since all the relay servers in the email chain are harvesting your information anyway.

    And then giving the metadata (or meaning) to all the intel services. Which also are hosted at the connection points.

    However, if you fully encrypt your email at the source, host your own ISP. We'll still get the info, either from the recipient or other things you aren't aware we use, but it makes us work harder to get it.

    Free? Nothing is free.

    --
    -- Tigger warning: This post may contain tiggers! --
  27. Proton Mail by Rick+Schumann · · Score: 4, Informative

    I've had the same question recently and the answer I got was Proton Mail, based in Switzerland. Fully encrypted end-to-end. I'm surprised someone else hasn't mentioned it by now.

    1. Re:Proton Mail by sorenstoutner · · Score: 2

      I run my own email server, but if I wasnâ(TM)t able to I would likely use FastMail or ProtonMail.

    2. Re:Proton Mail by LienRag · · Score: 1

      ProtonMail asks for a cellphone number "to verify that you are not a bot": since there are other ways to verify that, the whole thing seems a tad sketchy to me...

  28. Proton Mail by ControlsGeek · · Score: 5, Interesting

    Proton Mail is hosted in Switzerland has end to end encryption with Android and IOS app support and has withstood denial of service attacks from suspected state sponsored hacking.
      Just the fact that a state actor tried to take them down is a reason to consider them.

  29. I use Signal I listened to Eric Snowden by wizzerking · · Score: 1
    1. Re:I use Signal I listened to Eric Snowden by ma1wrbu5tr · · Score: 1

      Will check it out. Thanks for replying.

      --
      Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
    2. Re:I use Signal I listened to Eric Snowden by Lostcause · · Score: 1

      I second Proton Mail. You can/should encrypt your email box with an additional password.

  30. Don't just get a mail provider. Get an address. by grnbrg · · Score: 5, Interesting

    You are already going through the pain of changing your address. Make sure you don't have to do it again some time in the future. Mail providers change policies or shut down, sometimes without warning.

    Go ahead, and pick a mail provider that you like. But also go out and buy a personal domain. You'll probably be able to find one you like for $10 per year, and you can find DNS providers that will do mail re-direction for free. Have a wildcard redirect set to send any email sent to the domain forwarded to the new mail address. Don't like the way the provider is now doing things? Get a new provider and email address, and change the redirect.

  31. Don't rely on an email service for encryption by hackel · · Score: 1

    If you want encryption, you really need to just do it yourself. When you do, it doesn't make any difference which provider you use. I would use Gmail simply because they are so huge, the reliability shouldn't be an issue. It works with any standard IMAP client, and since your messages are encrypted, Google can't even scrape them to profile you. Also make sure you are using your own domain name, so that you can easily change providers should you ever wish to.

  32. ProtonMail by bradley13 · · Score: 1

    I'm looking around as well, and what I read about ProtonMail is pretty convincing. They offer free or paid accounts, promise no logging, and they're located in Switzerland.

    --
    Enjoy life! This is not a dress rehearsal.
    1. Re:Protonmail by 110010001000 · · Score: 1

      Aren't they the geniuses who thought it was a good idea to pay blackmail to stop a DDoS? How does it use Azure though? I thought they ran their own servers and didn't use the "Cloud"

    2. Re:Protonmail by TheOuterLinux · · Score: 1

      https://protonmail.com/blog/protonmail-ddos-attacks/

      My bad on the Azure thing. I got it confused with Tresorit.

  33. Re:Sad to go, But I'll be joining you by unixisc · · Score: 1

    I too had that, and using Thunderbird, I moved all the folders I wanted into other accounts. One thing I forgot - to move my Financial folder into one of the other accounts, and lost everything there. Fortunately, I was able to retrieve the email of my tax preparer, so the damage was not irreversible. But this is what I'd suggest: use Thunderbird to host your yahoo! as well as your other accounts (you do have >1 email account, don't you?), and then move all the emails that are not worth deleting to that one. If you had a policy of putting them in folders, that's even better.

    I have something like 7 email accounts for different things. One thing - I always access the emails via Fossamail in Windows or Thunderbird in TrueOS (since Fossamail doesn't have a FreeBSD port the last I checked). That way, I don't get peppered w/ ads or popups. I do have an incredible amount of spam, which was a leading reason that I closed my yahoo account. Gmail, AOL (I have a netscape.net account from the 90s) and Microsoft (both live.com & hotmail) are nowhere near as bad.

  34. Completely agree by Calibax · · Score: 5, Insightful

    I've been with Fastmail since it was in beta in 2001. The company ONLY does email and associated services. This means they are focused on making it work correctly and users having a good features. I would never consider moving.

  35. Private Server by duke_cheetah2003 · · Score: 1

    Follow in the steps of Ms. Secretary Clinton and put together your own private email server!

    I did that like 20 years ago when it wasn't as popular.

    1. Re:Private Server by Chewbacon · · Score: 1

      That's a lot of work and a lot of room for error. Not worth it unless you really don't want to answer to anyone about email. You can get it done on AWS.

      --
      Chewbacon
      The Bible is like Wikipedia: written by a bunch of people and verifiable by questionable sources.
  36. Re:And you were with Yahoo?!?! by unixisc · · Score: 4, Insightful

    B'cos years ago, Yahoo! was a pretty respectable company, and had loads of good stuff associated, like geocities and yahoo chat! If I recall right, it was even there ahead of Google, and were a pretty good bet when Netscape was floundering. My first webmail account was Netscape.net (under Netscape 4), then yahoo & hotmail.

    Things changed, & went downhill once Google pioneered the concept of monetizing everything on the internet - be it email, web pages and so on. The biggest evidence of that is the way MICROSOFT has changed - from a pure software company (plus some hardware) to a Google wannabe.

  37. Don't be obtuse by bradley13 · · Score: 3, Informative

    Don't be obtuse.

    Of course there's no perfect security. You know, if a burglar wants to get into you house badly enough, he'll get in. So why bother locking your door? In fact, just leave your front door open... Oh, change all of your PINs to 1234 and your passwords to "password" while you're at it. After all, if there's no perfect security, why have any security.

    The point of TFS is finding a service that is as secure as reasonably possible, while still being useful.

    --
    Enjoy life! This is not a dress rehearsal.
    1. Re:Don't be obtuse by 110010001000 · · Score: 1

      What is as "secure as reasonably possible"? It either is secure, or it isn't. No email service is secure. You might as well use Gmail. Or stick with Yahoo. Or host your own. What is the difference? None of them are secure.

    2. Re:Don't be obtuse by Minupla · · Score: 1

      We could define "secure as reasonably possible" as "occupying a value in a coordinate plane with one axis containing ease of use, and the other being risk (comprising an overall scoring for confidentiality, availability & integrity (in a data non-alteration sense, not a moral sense)) so as to minimize the risk axis while keeping the ease of use axis below a value that 75% of people would find acceptable".

      That work for everyone?

      Min

      --
      On the whole, I find that I prefer Slashdot posts to twitter ones because I don't get limited to 140 chars before
    3. Re:Don't be obtuse by 110010001000 · · Score: 1

      Oh in that case I recommend Hotmail.

    4. Re:Don't be obtuse by Minupla · · Score: 1

      And maybe that works fine for you, it does my mother. Nothing wrong with using a solution that meets your needs and satisfies your risk tolerance. Companies make exactly that sort of trade-off all the time. The issue comes when they're not honest about one of those two variables.

      Min

      --
      On the whole, I find that I prefer Slashdot posts to twitter ones because I don't get limited to 140 chars before
    5. Re:Don't be obtuse by Anonymous Coward · · Score: 1

      There is "secure enough". You can make up any doomsday scenario: If the badguys wanted your information, they could send over goons to hit you with a $5 wrench until you gave up your disk encryption passwords. So why bother with any encryption? Because unless doomsday comes during your lifetime, you'd like to have a modicum of privacy! Life isn't black & white, Mr. Autistic! Have the best of mostly good enough security.

      Otherwise you might as well go into a men's prison as a sex surrogate because .. you know .. there is male on male rape, no way to make it 100% preventable.

    6. Re:Don't be obtuse by nosfucious · · Score: 1

      TL;DR

      Free, easy to use, secure. Pick any two.

      --
      Q:I was listening to a CD in Grip and it sounded horrible! What's up? A:Perhaps you are listening to country music
  38. fetchmail + sendmail + imapd + horde by Orgasmatron · · Score: 1

    Build or rent a server, load it up. Fetchmail can fetch mail from any POP or IMAP provider, if you want to go that route. Or, you can accept mail directly through sendmail, which is not trivial and requires a domain.

    If you don't want to lose control of your email address ever again, you can register a domain and either host it yourself, or find a commercial host that will work with customer domains.

    Outgoing with sendmail is easy, or your incoming host will usually provide it too, if you prefer that.

    Horde works great with activesync devices, or with browsers. It can also manage your calendar, contacts, notes, todo list, etc.

    Advanced topics for the DIY crowd: greylisting, spamassassin, DNS-rbls, SPF, SRS

    --
    See that "Preview" button?
    1. Re:fetchmail + sendmail + imapd + horde by eneville · · Score: 1

      Build or rent a server, load it up. Fetchmail can fetch mail from any POP or IMAP provider, if you want to go that route. Or, you can accept mail directly through sendmail, which is not trivial and requires a domain.

      If you don't want to lose control of your email address ever again, you can register a domain and either host it yourself, or find a commercial host that will work with customer domains.

      Outgoing with sendmail is easy, or your incoming host will usually provide it too, if you prefer that.

      Horde works great with activesync devices, or with browsers. It can also manage your calendar, contacts, notes, todo list, etc.

      Advanced topics for the DIY crowd: greylisting, spamassassin, DNS-rbls, SPF, SRS

      This. Except I'm not a sendmail fan. qmail/djbdns has done me fine since 2003, very reliable, very easy to patch. The .qmail rules that have built up over that time allow me to avoid spamassassin on addresses that are not mail lists or things I know are social media related etc, very handy and saves a lot of wasted CPU. Greylisting is good, but annoyingly some web servers try and deliver directly on tcp/25, and don't queue if given a 4xx.

      The very real benefit to running your own is that you can easily ssh to the machine and run mutt in a screen. So much more efficient than a web browser that renders the text/html part full of junk.

  39. Re:Don't just get a mail provider. Get an address. by eric2hill · · Score: 2

    To add on to this great advice, PAY for G Suite. It's $50/year for the mailbox, completely ad-free, and comes with business support. It doesn't support complete integration like the free gmail account (Play family sharing is a particular pain point), but it's the best anti-spam solution available today and that's worth the money alone. Add to it the benefits of Drive, Photos, Hangouts, etc and it's a fantastic value for the money.

    --
    LOAD "SIG",8,1
    LOADING...
    READY.
    RUN
  40. buy a domain, get a hosting service by gosand · · Score: 1

    A lot of hosting services provide plenty of space. They come with free email accounts too, so you can set up 'throwaway' emails like donotspamme@yourdomain.com that you can use for services that might spam you.

    Shop around for the hosting providers that have what you want. I use fetchmail to pull mine down locally, and pine as my client (yes, for real), but there are plenty of email clients or webmail options on your provider.

    Best of all, you can keep your domain and you control it.

    --

    My beliefs do not require that you agree with them.

  41. Protonmail by TheOuterLinux · · Score: 2

    It's available via web and on mobile devices, including iOS 8 if you have an older phone. You get 500 MB storage free, uses two passwords (one for account and one for mailbox), and the providers themselves cannot recover your mailbox passwords. You can tag your emails, make folders, identifies spam, and has an easy way to report bugs/features. They also have a bounty program for hacking with no success and are protected by Swiss privacy laws. It was made by CERN and MIT. The servers are located in a bunker 1000 meters below the Swiss Alps that use end-to-end encryption and 4096-bit SSL certificates. No cloud hosting and they manage their own stuff. https://protonmail.com/securit... The only problem is that it uses Azure. I'm not an M$ at all, but it's either this or Enigmail with Thunderbird and Protonmail is very easy to use and the customer support is awesome whether you're a paying member or not.

  42. Re:Sad to go, But I'll be joining you by ma1wrbu5tr · · Score: 1

    I moved everything relevant to the Inbox folder, marked it as unread, and set my pop client to download to my PC. Next step is working on exporting my contacts list.

    --
    Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  43. Re:Sad to go, But I'll be joining you by ma1wrbu5tr · · Score: 1

    Thunderbird was my first stop on this adventure. Thanks for replying. (Can you believe all the people suggesting gmail?)

    --
    Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  44. Get your own domain name, then use gmail or else by c120plus · · Score: 1

    I got my own domain name in 1998 and so own my email address. I forward that to a free email provider, and when I'm not happy, I point my email to the next one. I made this switch approx 3 times when my current mail provider was annoying me too much with ads or price hikes. Owning you email address is totally worth it, just imagine all the time you save when you make the switch...

  45. Re:And you were with Yahoo?!?! by ma1wrbu5tr · · Score: 1

    As stated in the post, I'm willing to pay. Just not sure which service to use.

    --
    Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  46. Proton Mail is a great Alternative by evolutionary · · Score: 1

    Where Google basically mines your data en masse and gives it out to US government agencies, Proton Mail is in Switzerland and is not subject to involuntary data request from USA government requests. (Of course they could do it voluntarily but it would really hurt their rep if word got out) https://protonmail.com/

    --
    "Imagination is more important than knowledge" - Einstein
  47. If you want privacy, use G Suite by mellon · · Score: 4, Insightful

    The Terms of Service are actually pretty strict, and Google has extremely good data center security hygiene. The ToS on gmail are much more lax, even though it's the same software.

  48. President Trump's preferred alternative... by evolutionary · · Score: 1

    Fresh from Russia: https://mail.yandex.com/

    --
    "Imagination is more important than knowledge" - Einstein
  49. Postfix + Dovecot by guruevi · · Score: 1

    Duh... if you want control over the privacy of your mailbox, you have to host it yourself. You can do that at home with some ISPs (give them a call if they actively block port 25, some will simply unblock it), most VPS and many other hosting systems, you can get a good host for a few bucks a month and it's "free" if you already have one for business or other purposes or if you have a business or someone with business-grade ISP's you can also host systems (perhaps offer a trade)

    You can pick a host in far-away-istan or closer to home depending on your government, I myself have dedicated servers hosted in the US (for latency reasons) but hosted by a non-US company with encrypted file systems that are backed up to a disk at another site. I'm not sure if the hosting company at Sealand still exists, if you're really worried about government checking up on you there are various offshore hosting companies but then you wouldn't be using e-mail in the first place although offshore hosting is typically ~$1-200/month even for the simplest servers.

    --
    Custom electronics and digital signage for your business: www.evcircuits.com
  50. your own by holophrastic · · Score: 1

    is there a reason that you don't just have your own mailserver? you have three options:

    option 1: buy/pay for a hosted/managed/co-lo/virtual/private-cloud webserver somewhere. you can pay between $5 and $500 per month, and install whatever you choose.

    option 2: buy/pay for an account with someone who's already done option 1 above. you can pay between $2/mailbox and $100 per month. I would charge you $25/month for many mailboxes. You can manage them however you choose.

    option 3: buy a domain name, and point it to you static or dynamic home ip address. run your own mailserver at home. it'll cost you nothing beyond the domain & dns level of probably $25 per year. presuming your connection is reasonable -- and e-mail compensates for occasional fluctuations anyway -- you'll have everything under your own roof.

    In all three cases, you have 100% privacy. Options 1 & 3 let you have whatever features you can imagine. And no matter what you'll have far more control than you've ever had before.

    Personally, in your position, I'd go the game clan method. Get three buddies, pool your pennies, choose option 1 above, spend $50-$100/month on a virtually-dedicated/private-cloud server that starts off with some reasonable package of carp already setup for you, and take it from there. My neighbour offers such packages at every price range imaginable.

    1. Re:your own by jaklode · · Score: 1

      AFAIUI, option 3 is unrealistic, as the big email servers black list dynamic IP addresses, or well, IP address blocks used for home internet connections.

    2. Re:your own by holophrastic · · Score: 1

      yeah, but that's easily resolved by buying an ip address, and the appropriate service. Although I agree that does quickly destroy the budget-apeal of option 3.

  51. Re:Don't just get a mail provider. Get an address. by tonymercmobily · · Score: 1

    Love your signature. You obviously had a super fast floppy disk drive... I never managed to get my hands on one of those! :)

    I wonder how many here understand it :)

  52. Proton Mail by fadethepolice · · Score: 1

    Proton Mail

  53. Email Privacy/Security by mattmarlowe · · Score: 2

    If all you care about is convenience and price, gmail is the best bet.

    However, gmail has a few weak points:
    - Governments and corporations assume you are using it, if you become a target, first thing they do is sue or force google to give them a copy of all your email. You may not find out about it until after the fact. Basically, using gmail/google means you are OK with the surveillance state being able to grab all the details about your digital life whenever it wants.
    - Hackers assume that getting access to email is the best path in social networking and they have put together an extensive trick list focusing on gmail since everyone uses it. And, if they gain access, are you sure you would know about it or even if google found out about it, that they would tell you? It's in google's interest that everyone forget about the security of their cloud data.
    - Gmail gets coordinated with all the other info that google knows about you and google sells info about you to their customers or targets ads for you on behalf of customers. Frankly, even without email, I think google knows enough already.
    - Gmail imap is _wierd_ and google will probably shut it down in favor of some google only protocol if they ever can.
    - Google is no longer a _good_ company, as it has become bigger, it has started to act more like a Monopoly and that combined with its ownership of android is pushing us more towards a closed internet. I honestly don't want to support Google's growth anymore.

    Another option is office 365:
    - Microsoft has its issues, but it realizes it really needs to compete in the cloud space.
    - Microsoft email integrates well if you have a mobile hardware device like a Surface Pro/Surface Book.
    - Exchange sync for contacts/calendar/groupware is hard to compete with.

    That said, MS has its own security issues....so the best solution is likely hosting your own email....and for those who don't have the time to be constantly updating, find a good mail software suite that does get updated automatically and which has a good security history. Zimbra might be a good example - there are many others.

  54. Another missing requirement by fustakrakich · · Score: 1

    Try to find a free service that doesn't require a cell phone.

    --
    “He’s not deformed, he’s just drunk!”
  55. Related: How do I get my Y! email out? by Bomarc · · Score: 1

    I believe that Y! is the only free email service provider that won't let you bulk-save your email messages. So, I've all but left Yahoo; however How do I get my (old) messages out?
    (Before the 'let it go' people come, I need the messages for legal purposes).
    I was able to get *some* of the messages to Gmail; however, I would like to get all of them.

    Suggestions?

  56. Re: sounds like a job for protonmail by CronoCloud · · Score: 1

    You're either japanese or just time traveled from 2002, because nobody except Japanese and certain out of touch 'nix users living in the past use archaic sylpheed when claws-mail, a superior fork is around.

    Open source Claws-mail doesn't just have a "fairly current" windows build, it IS current. As well as builds for NetBSD AND FreeBSD.

  57. What about outbound mail? by Megane · · Score: 1

    I have AT&T as an ISP, and a few years ago they farmed out their mail to Yahoo. I run my own inbound, but for at least a decade, I have dealt with the outbound port 25 block (even before it got blocked) by forwarding outbound mail through my ISP. When it was just AT&T, they could identify "friendly" mail by being in one of their IP blocks. Now you have to use your account's e-mail/password combo.

    The problem is that by default it only accepts mail with a From: address equal to that specific e-mail address. Any others you want (I typically use one user name with two different domains, one or two other household members), have to be specifically added with the Yahoo Mail user interface.

    I guess I may just end up having to ask for outbound 25 to be opened up, and re-configure my server to send outbound mail directly. The negative side is that will cause my mail to come from a customer address (anti-spammers are likely to flag the IPs as "dynamic", even though it's in a static block), so I may have to get a hosted server for an outbound relay.

    Or I could even get lucky, and AT&T might realize the situation they are now in (e-mail service outsourced to one of their telco competitors) and in-source it again.

    --
    #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
    1. Re:What about outbound mail? by DottedQuad · · Score: 1

      I have been sending out (and receiving) email on a static IPv4 address on my home AT&T U-verse connection for years without major problems. They block port 25 by default, but just ask them and they will remove the block for you. I pay an extra fee for a chunk of static IP address space, but I get forward and reverse DNS how I want.

  58. Thank you to all commenters. by ma1wrbu5tr · · Score: 1

    You have given me much food for thought. Perhaps to follow will be a detailed description of my preferred solution.

    --
    Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  59. Really? by bongey · · Score: 1

    What took you this long? It's 2017 not 1997.

  60. Re:Don't just get a mail provider. Get an address. by TeknoHog · · Score: 1

    This is probably not very relevant, but in Finland we have this thing called http://iki.fi/ that provides permanent redirect addresses for web and email. They charge a one-time signup fee around 30 EUR for life. It's only for Finnish residents, though. The closest international equivalent I can think of is http://sdf.org/ -- I also paid a similar one-time fee for a somewhat expanded account.

    --
    Escher was the first MC and Giger invented the HR department.
  61. Submit a bug report by Sigma+7 · · Score: 1

    If the browser uploads something, and you can't find out what's uploaded, then that's a severe security issue more serious than auto-executing javascript.

    If you can find out what's uploaded simply by pressing F12 and viewing the networkt tab, then there's nothing to worry about. In case of Yahoo mail, it's probably saving the draft.

  62. Re:Don't just get a mail provider. Get an address. by CronoCloud · · Score: 1

    You obviously had a super fast floppy disk drive...

    The 1541 super fast? Ha ha ha ha

    I never managed to get my hands on one of those! :)

    UK? They were considered de-rigeur in the states.

    I wonder how many here understand it :)

    Probably most of Slashdot.

  63. Re:You neither need nor want encrypted email by CronoCloud · · Score: 1

    As far as I can tell it is encrypted with just a passphrase and not to a key?

  64. Re: sounds like a job for protonmail by KGIII · · Score: 1

    It's Slashdot. If they have the source, build the damned thing themselves. Sheesh...

    --
    "So long and thanks for all the fish."
  65. Re:Until Email transport security gets better.... by PPH · · Score: 1

    However, the major email providers all keep the server stuff in clear text. So unless you use end-to-end encryption like PGP

    This is my point. The TLAs don't need to crack SSL/TLS. They just get a copy from your ISP. My ISP only moves encrypted blobs for me. So I don't care if they've cracked the link or have free access to the server disk farm.

    --
    Have gnu, will travel.
  66. Re:Sad to go, But I'll be joining you by unixisc · · Score: 1

    If you successfully move all your emails to the newer account using Thunderbird, it won't be that difficult to retrieve the contacts. Aside from gmail, one more thing I might suggest - outlook.com. In which case, in Windows, you can use that account to log in, and the People app will automatically mine your contacts for you. If you then use either Thunderbird or Windows Mail, you won't have to see their ads.

  67. Re:Don't just get a mail provider. Get an address. by XXeR · · Score: 1

    Wow, so you're pretty much a dick, huh..

  68. Yandex Mail For Domain by atomlib · · Score: 1

    If you have no biases against a Russian company, I highly recommend Yandex Mail For Domain where you can use your own domain name free of charge. Personally I use it as my main e-mail account. Or you may use their regular Yandex.Mail if you don't have your own domain name.

  69. Fastmail by thatkid_2002 · · Score: 1

    Although I run my own primary email, I chose to pay for Fastmail as my secondary/backup/place where I get emails for my primary services sent so that way I can recover them when they go down.

    If you're looking for a high-quality, run by people who give a damn, and (in my opinion) trustworthy service then Fastmail is the way to go. It's not the cheapest and doesn't have massive limits though.

  70. Re:Ignore U.S. services, use EU services by guises · · Score: 1

    A couple more: countermail.com, neomailbox.com

    Also, ThatOnePrivacyGuy (who mostly does VPN reviews) has a section on his website for email services. I like his reviews, he seems to have a good approach to all of this.

  71. KolabNow by jouassou · · Score: 1

    If you don't mind paying $3/month, I highly recommend KolabNow. They offer both webmail and IMAP access, the software they develop is open source, the company's privacy policy is great, and they're hosted in Switzerland which also has sane laws regarding privacy. The few times there's been issues (DDoS attacks, Heartbleed bug) they've been upfront about it and sent out a mail immediately explaining the situation and what they're doing to address it. I've used them for four years now, and I'm quite satisfied.

  72. Re:Don't just get a mail provider. Get an address. by CronoCloud · · Score: 1

    Why assume malice? I assumed the person WASN'T being sarcastic because if he was he should have emphasized it a bit more.

    Besides that, 1541 ownership WAS very low in the UK most UK C64 owners got their games on tapes which was not the case in the US.

    And while the 1541 is faster than a tape drive, it was slower than Apple and Atari drives.

  73. Thank you! I hate Gmail's UI! by wwphx · · Score: 1

    I've had Yahoo Mail since before '02, and I'm not sure I'm going to give it up now. I could put it on my own server, but I just haven't committed to that yet. I absolutely hate the UI on Gmail, even though I maintain three accounts there for various purposes. I think I'm just going to wait and see what Verizon does. Maybe they'll give me a price break on my cell bill (yeah, and monkeys might fly out of my butt).

    --
    When you sympathize with stupidity, you start thinking like an idiot.
  74. Re:Don't just get a mail provider. Get an address. by ma1wrbu5tr · · Score: 1

    C64 FTW

    --
    Why can't we go back to using jumpers to configure slot adapter cards? Why? I say!
  75. Does the NSA have their own webmail service yet? by 0111+1110 · · Score: 1

    I guess the NSA doesn't need their own webmail because they pretty much have open access to all the big American webmail companies. For some reason I have the idea that Gmail in particular is like home base for the NSA.

    If you have a gmail account you basically have to assume that everything you write there will be permanently stored and searchable in an the NSA text database. I guess some people are cool with that though. A lot of people don't care. It doesn't really bother me that much either, but it's not like there isn't a choice. So I go with offshore webmail instead.

    --
    Quite an experience to live in fear, isn't it? That's what it is to be a slave.
  76. Re: by minstrelmike · · Score: 1

    Gmail has automatic spam-blocking built-in. Whoever posted that they don't is probably some fBook flunkie.

  77. Posteo for example .. its not free .. by burni2 · · Score: 1

    Because everything thats free comes with a catch .. except free beer.

  78. Automatic forwarding failed until I fixed it by eric_harris_76 · · Score: 1

    My yahoo.com address has been around a while. It's the one I used for many newsletters and web-based services over the years. A large portion of my e-mail comes to me via that address, forwarded automatically to my ISP address.

    So when e-mail forwarding failed, without warning, it had consequences. It took over a day for me to notice it and to take corrective action: turn it on when it was already on, and then verify I wanted it on.

    A chunk of that time was spent finding current information about how to check the status of forwarding (it was on) and how to turn it on (which I did, anyway). Once I opened the e-mail to verify activation, it worked as though nothing had happened.

    Except that a bunch of e-mails which didn't get forwarded before still didn't forward.

    Understandable, and desirable, when turning on automatic forwarding that had not been on. You likely wouldn't want all the e-mail in your inbox, no matter how old, to get forwarded to that address -- just the new e-mail that arrived after automatic forwarding was turned on.

    Still, a pain in the ass. No response from service@yahoo.com. But it's been zero business days since I notified them (Friday evening), so maybe it's too early to be disappointed with them.

    Tomorrow evening is not.

    --
    There's no time like the present. Well, the past used to be.
  79. wow yes, gmail all the way by kbdd · · Score: 1

    At the moment, I have 8 email accounts on 5 different systems. Like others, I use gmail predominantly and gmail provides by far the best user experience and performance. I do have a Yahoo account that I cannot close right away unfortunately, but I have to find a way to wind it down. Yahoo mail has always had a terrible user experience and is excessively crash prone and a CPU hog on the desktop to the point that I no longer use it on the desktop, I do use the Android Yahoo mail app that seems a little more robust but nowhere at the level of the gmail app. I have given up on independent (like Thunderbird) POP3 (too inconvenient) or IMAP mail clients because of poor or absent synchronization between devices. Put your pride carefully in your pocket as you might need it later, and use gmail.