Best Secure Email Providers

[q3cpma]

>Protonmail
Extremely bloated and proprietary bridge forcing you to use a modern browser to read you mails - modern browsers that are an enormous security problem.
>OpenDNS
Has logging. The best way is to run a recursive and validating client like unbound for "normal" stuff and go through Tor if you really want privacy. At least, use OpenNIC with dnscrypt if you don't want the hassle of using Tor.

Anyone interested in the topic should read https://www.gnu.org/proprietary/malware-microsoft.en.html (MS Windows) and https://spyware.neocities.org/articles/ (browsers and various software).

 

[Blumlein 88]

>Protonmail
Extremely bloated and proprietary bridge forcing you to use a modern browser to read you mails - modern browsers that are an enormous security problem.
>OpenDNS
Has logging. The best way is to run a recursive and validating client like unbound for "normal" stuff and go through Tor if you really want privacy. At least, use OpenNIC with dnscrypt if you don't want the hassle of using Tor.

Anyone interested in the topic should read https://www.gnu.org/proprietary/malware-microsoft.en.html (MS Windows) and https://spyware.neocities.org/articles/ (browsers and various software).

The info in the second link is not very up to date.

As always various situations may require different solutions. I use OpenDNS because it allows me to block access to certain places from my network. Simple example is blocking adult sites.

 

[q3cpma]

Well, but it's a convenience matter, not a privacy one. Blocking should be done at the client level, anyway (see https://github.com/gbxyz/unbound-block-hosts for how to do it with unbound).

 

[digititus]

I have been running mail servers for many years - my own and corporate. The technology is insecure by design. Your mail passes through many hops to reach the recipient and vice versa. Unless sender and receiver servers are using TLS/SSL each hop in between will have a copy of your messages (hello security services!) Your best bet it to run your own server, but it is technologically a challenge. Proton / Tuta are ok if you are mailing others who use the same service, but anything outside of that suffers from the same flaws. There is of course GPG/PGP, but no one can be bothered. There are better encrypted messaging protocols for more secure communications.

TLDR, email is broken. It is insecure by design. Nothing will be done to fix it.