Tutanota makes encryption easy VS proton-mail

Hi HN, we are the developers from Tuta (formerly Tutanota), the German end-to-end encrypted email provider, and we recently released the world's first post-quantum encryption for email.

We have included a full technical write-up of the cryptography involved in these changes and we have released it for open public review.

This document specifies TutaCrypt, a protocol designed for hybrid email encryption in Tuta Mail. The protocol combines a classical Elliptic-Curve-Diffie-Hellman key exchange with a post-quantum KEM. The goal is to replace the usage of RSA in Tuta Mail.

In the remainder of this document we describe some preliminaries such as the cryptographic primitives used. We define the core algorithms of the protocol and describe the flow of messages between the communicating parties. Finally, we discuss the security properties and some limitations of the protocol in its current form.

We are eager for your constructive feedback. All cryptography related source code is available for review and experimenting here: https://github.com/tutao/tutanota/blob/master/src/api/worker...

If you have any questions or comments related to post-quantum cryptography please let us know in the comments!

Tutanota - Free secure email account service provider with built-in end-to-end encryption, no ads, no tracking. Free 1GB storage. Which is also partially open source, so you can self-host.

You are probably using a window manager and Electron is not able to detect the secret service backend you have installed. We recently switched to Electron’s built in api for storing credentials, which is the reason for this issue. https://github.com/tutao/tutanota/issues/6265

Tuta Mail (version 3.119.3): Encrypted email & calendar service - easy to use, secure by design.

A look at tuta.com and tutanota.com demonstrates that Tuta is using an Amazon Start of Authority (SOA) DNS record and 4 corresponding Amazon Name Server (NS) DNS records.

rich coming from tuta who still lack a onion based login. this ticket from 2018 was locked as off-topic. https://github.com/tutao/tutanota/issues/528

as lenin said, the best way to control the opposition is to lead it. for me, unless the company has been raided by the government they simply cannot be trusted.

apple proudly advertises privacy billboards while sharing everything they are asked under shadow laws. absolute hypocrisy and double standards. but then they wouldnt be where they are without government money and favours.

Have a non business paid account. Can you change your current tutanota.com email to the tuta.com email?

I have an at tutanota.com account. All of a sudden, this evening, it disconnected and I haven't been able to re-access my account. It actually seems like the whole platform is down, but maybe that's just the context from my devices.

I have a fairly recent free account that I believe was on the domain tutanota.com which I can no longer log into.

The linked site is very low on info high on outrageous claims. It is not the same as gmail and protons response to that paper are accurate imo. The fact is web clients are inherently insecure but you can run your own client entirely afaik (https://github.com/ProtonMail/proton-mail). I don't think anybody has evidence of wrong doing but the service is proprietary so...

I was switched from beta to stable release but saw another update and when I clicked on it, I was reverted back to the old design and couldn't find a switch to go the beta again. I had to use beta.protonmail.com address to go back to the beta. The information you have written in comments below is inaccurate. I'm a bit disappointed by this.

The new web app has been open source for a while already and can be found here: https://github.com/ProtonMail/proton-mail

Well, to log to beta you can simply go to beta.protonmail.com when needed.

If you want it to, you check check out the beta version (beta.protonmail.com) - that offers the ability to stay logged in on the web.

For example, if I wanted to add beta.protonmail.com to a container, I am running into the issue where I cannot add beta.protonmail.com to always open in a container because as soon as visiting the site, it would redirect to https://account.protonmail.com/login. So the beta.protonmail.com would never open in a container tab, but then it would open the login page by opening a brand new tab.

You've been pointed at https://beta.protonmail.com/ already.

Hi! Have you checked out beta.protonmail.com? It has a sleek new interface, and we think the login page will be more to your liking :)