I think I know the answer, bit maybe I’m missing something

Since proton only sends and receives encrypted emails to other proton accounts, that means that when you get or send an email to someone else, they have to send / receive unencrypted and there is no way for us to verify what they are doing. Right?

Also if most accounts are google Microsoft, they still get 90% of my emails. By switching to proton I think I’ve gained nothing, while losing convenience , added another trust point, and having two different companies have my data instead of just one

Proton drive, calendar and VPN I think are fine

Sorry for the poor syntax. I’m at work working on email related things, and this topic kept distracting me. I might correct it later

  • flatbield@beehaw.orgEnglish
    2·
    7 days ago

    There is an advantage of using a provider that suports MTA STS. This is Strict Transport Security and forces at least transport encryption.

    There is an advantage to use a provider you pay for too and at least claims not to read your email.

    It is also nice if they can host your domain and have good delivery.

    Edit: I meant MTA STS not SMTP STS.

    • notarobot@lemmy.zipOP
      3·
      7 days ago

      Haven’t heard of MTA sts. I’ll have to research it, but it probably doesn’t change the fact that when exchanging emails with another provider, they have to work with plaintext

      • flatbield@beehaw.orgEnglish
        2·
        7 days ago

        Google is promoting MTA-STS. MS is at least testing it and some others. Proton mail might support, check. I use NameCheap shared hosting mail. They support incoming but not outgoing.

        Sure it is clear inside each org but secures between. Nice because you can secure in your org by contract. Not as good as e2ee of course.

        • notarobot@lemmy.zipOP
          2·
          6 days ago

          i read the first part of google’s article about MAT-STS. it is good for secury, but does nothing to prevent providersfor reading in and out email

          • flatbield@beehaw.orgEnglish
            1·
            6 days ago

            No but if you have a contract with a providor you pay for, those are the terms. For example Google free servicies they mine data but their paid services they do not. Sure e2ee is better but transport encryption is good.