Tutanota makes encryption easy VS Mailcow

Hi HN, we are the developers from Tuta (formerly Tutanota), the German end-to-end encrypted email provider, and we recently released the world's first post-quantum encryption for email.

We have included a full technical write-up of the cryptography involved in these changes and we have released it for open public review.

This document specifies TutaCrypt, a protocol designed for hybrid email encryption in Tuta Mail. The protocol combines a classical Elliptic-Curve-Diffie-Hellman key exchange with a post-quantum KEM. The goal is to replace the usage of RSA in Tuta Mail.

In the remainder of this document we describe some preliminaries such as the cryptographic primitives used. We define the core algorithms of the protocol and describe the flow of messages between the communicating parties. Finally, we discuss the security properties and some limitations of the protocol in its current form.

We are eager for your constructive feedback. All cryptography related source code is available for review and experimenting here: https://github.com/tutao/tutanota/blob/master/src/api/worker...

If you have any questions or comments related to post-quantum cryptography please let us know in the comments!

Tutanota - Free secure email account service provider with built-in end-to-end encryption, no ads, no tracking. Free 1GB storage. Which is also partially open source, so you can self-host.

You are probably using a window manager and Electron is not able to detect the secret service backend you have installed. We recently switched to Electron’s built in api for storing credentials, which is the reason for this issue. https://github.com/tutao/tutanota/issues/6265

Tuta Mail (version 3.119.3): Encrypted email & calendar service - easy to use, secure by design.

A look at tuta.com and tutanota.com demonstrates that Tuta is using an Amazon Start of Authority (SOA) DNS record and 4 corresponding Amazon Name Server (NS) DNS records.

rich coming from tuta who still lack a onion based login. this ticket from 2018 was locked as off-topic. https://github.com/tutao/tutanota/issues/528

as lenin said, the best way to control the opposition is to lead it. for me, unless the company has been raided by the government they simply cannot be trusted.

apple proudly advertises privacy billboards while sharing everything they are asked under shadow laws. absolute hypocrisy and double standards. but then they wouldnt be where they are without government money and favours.

Have a non business paid account. Can you change your current tutanota.com email to the tuta.com email?

I have an at tutanota.com account. All of a sudden, this evening, it disconnected and I haven't been able to re-access my account. It actually seems like the whole platform is down, but maybe that's just the context from my devices.

You could go with https://mailcow.email, it's pretty easy to setup and keep up to date.

> Which different provider did you go with?

I actually fell back to Gmail for the time being - I just don't like to "advertise" any Google product for known reasons, even though Gmail is a quite solid product, sorry about the confusion - but that's my temporary solution.

I am planning to either give Migadu a try or host my own mail provider. (I have seen some good feedback about https://mailcow.email)

I've been running mailcow [1] on a Hetzner cloud server for a few years and am pretty happy with it.

[1] https://mailcow.email

I have been searching for a self-hosted suite similar to Google Worksuite. I found the following: 1. Mailcow - https://mailcow.email/

Yes, I switched to mailcow (https://mailcow.email) and installed Roundcube via the excellent tutorial (https://docs.mailcow.email/third_party/roundcube/third_party-roundcube).

I've heard good things about mailcow

https://mailcow.email/

You can self host email if you really want to, but it's really more trouble than it's worth. If you do self host, you have to worry about the consequences of missed emails if your server or Internet ever goes down, and you'll have to use someone else's SMTP server if you don't want your emails to go directly to spam. The cheapest good SMTP server is Amazon SES, which I believe is $0.10 per 10k emails. I've been looking into mailcow for self hosting an email server and it seems the best way to go.

However, https://mailcow.email/ is the ONLY exclusion I make for that. As it's an all in one docker managed solution. Where the only things you have to worry about is the reputation of your mailing IP.