this post was submitted on 20 Jul 2023
4 points (100.0% liked)

Privacy Guides

16784 readers
59 users here now

In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.

This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.

You can subscribe to this community from any Kbin or Lemmy instance:

Learn more...

Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!

Want to get involved? The website is open-source on GitHub, and your help would be appreciated!

This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.

Moderation Rules:

  1. We prefer posting about open-source software whenever possible.
  2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
  3. No soliciting engagement: Don't ask for upvotes, follows, etc.
  4. Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
  5. Be civil, no violence, hate speech. Assume people here are posting in good faith.
  6. Don't repost topics which have already been covered here.
  7. News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
  8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
  9. No help vampires: This is not a tech support subreddit, don't abuse our community's willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
  10. No misinformation: Extraordinary claims must be matched with evidence.
  11. Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
  12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.

Additional Resources:

founded 1 year ago
MODERATORS
jonah@lemmy.one
dngray@lemmy.one
freddy@lemmy.one
ninchuka@lemmy.one
jonah@lemmy.jonaharagon.net
4
Tutanota vs Proton Mail (lemmy.world)
submitted 1 year ago by Asudox@lemmy.world to c/privacyguides@lemmy.one
24 comments fedilink hide all child comments
 

I've been using Tutanota for a while now. Been interested in people's opinions about Tutanota and Protonmail.

top 24 comments
sorted by: hot top controversial new old
[–] sanpo@sopuli.xyz 6 points 1 year ago (1 children)

Tutanota doesn't share their security audits, which Proton does.

Also, IIRC Tutanota uses their own custom encryption implementation, while Proton contributes to open source OpenPGP projects.

And when in the past the the Swiss gov ordered Proton to do some limited tracking for a specific user, after that they went to the court and succeeded in changing the law so it's no longer possible to order this tracking.

Proton might not be ideal, but they seem to actually care about making the Internet a safer place.

[–] Asudox@lemmy.world 2 points 1 year ago* (last edited 1 year ago) (2 children)

I am sure that Tutanota does not use any custom encryption algorithm. It is clearly stated in the FAQ that they use RSA (with PFS) and AES to encrypt emails exchanged between Tutanota users. https://tutanota.com/encryption There's even a section which discusses why they do not use PGP. So it's not like they can't add it, they just don't because it lacks "important requirements". Plus they even are slowly developing a protocol that is post-quantum secure to encrypt their emails with.

[–] sanpo@sopuli.xyz 3 points 1 year ago

I'm not really saying that what Tutanota does is insecure, but historically doing security on your own instead of using established standards has not been a winning move.
Plus their unwillingness to open source it and not sharing the audits just doesn't inspire my confidence.

Overall they're probably fine, but these are some of the main reasons I ultimately chose Proton instead.

BTW, they're not "slowly developing" post-quantum encryption, they're just saying they may do that at some point in the future - which everyone will have to do anyway when we get to this point.

[–] dngray@lemmy.one 3 points 1 year ago

I am sure that Tutanota does not use any custom encryption algorithm. It is clearly stated in the FAQ that they use RSA (with PFS) and AES to encrypt emails exchanged between Tutanota users. https://tutanota.com/encryption

These are only primitive algorithms, the actual implementation is custom and specific to Tutanota, which mean it will only work with Tutanota as nothing else will implement it.

There is no way to do key distribution outside of Tutanota's service.

[–] A10@kerala.party 3 points 1 year ago

Tutanota deleted my account due to not logging in for 6 months. That was rough.

[–] ShroOmeric@lemmy.world 2 points 1 year ago

I am fine with Tutanota. Simple and working. All the half-finished services from Proton are just really annoying for me.

[–] River@lemmy.one 1 points 1 year ago (1 children)

Tutanota is mainly an email service, with very basic calendar and contact functionality. Proton has a suite of apps, including Mail, Drive, VPN, Calendar, and Pass. I got the Tutanota subscription when it was €1/month and it works well for me.

I used to use both mail mobile apps, but found out that Proton Mail notification doesn't work without Google Play Services, which is a deal breaker for me. So I use Tutanota as my main email and Proton as my backup and for its Drive. Either way, I'm just glad to leave Gmail.

[–] WeAreAllOne@lemm.ee 1 points 1 year ago (1 children)

There's this solution for notifications if you wanna try.

https://www.f-droid.org/packages/dev.lbeernaert.youhavemail/

[–] River@lemmy.one 1 points 1 year ago

Thank you. I've looked into it, but I didn't feel comfortable logging in with my Proton credentials.

[–] light_martyr@sh.itjust.works 1 points 1 year ago

Plus one for Proton. I've used Tutanota but enjoy the Proton suite. It's been a while since I used Tutanota so can't remember if they have a suite or not

[–] bom@lemmy.world 1 points 1 year ago

grandfathered premium sub 12$/year with a custom domain for my mails is what im using and I am pretty happy. Would recommend

[–] Melpomene@kbin.social 1 points 1 year ago

They're both excellent, but I prefer Proton because I need to be able to take reliable offline backups of my mail accounts & sync to a standard mail client. I can bridge and archive copies with Proton... last I checked, Tutanota lacked those features.

[–] Poggervania@kbin.social 1 points 1 year ago

I’ve been using Proton for a few months now and I like it. It’s under Swiss law and not part of that Five Eyes agency, so I at least feel like my data is secure. Their iOS app is actually really nice and easy to use if that will make or break something for you OP.

[–] privacyfalcon9899@lemmy.one 0 points 1 year ago (1 children)

+1 as a Proton unlimited user. Yes, proton has some unfinished products, I mainly purchased it for vpn and email( also SimpleLogin). So others are a bit of extra for me. After some time, I also plan to switch from Bitwarden to proton pass. If macOS client comes, then I will also switch to proton drive.

[–] landordragen@lemmy.ml 2 points 1 year ago

Proton Drive client for macOS is on beta right now.

We’re also beginning the beta for our upcoming macOS desktop app for Proton Drive. As with the other Proton betas, we’re starting with Proton Lifetime accounts today, with Visionary users to be invited later. While community feedback is always important, it’s especially vital at these early stages, so we will send beta invites via email based on our ability to keep up with the feedback. We’ll collect feedback both on Reddit and at drive@proton.me. Once the macOS app is released, we’ll also work on our planned Linux version.

https://proton.me/blog/proton-drive-windows

[–] keenworld@midwest.social 0 points 1 year ago (2 children)

I've never used Tutanota but been a Proton Unlimited user for a few years now. I definitely like the mail service, and Drive and VPN are nice but can be slow, especially Drive. Everything else I don't have much use for, and honestly I cringe when I see the new stuff they're working on. Not that any of it's bad, but it feels like they're in the "can't just make a good product" camp, constantly trying to add on new stuff instead of focusing on quality. Could have it all wrong, though, I'm just a person, not an analyst.

[–] nevernevermore@kbin.social 2 points 1 year ago

i immediately got defensive at this, but that's just my sunk cost fallacy speaking. The fact that it's a suite is what originally sold me; cancel my 1password/dropbox/PIA and still have money left over. But yeah apart from proton mail everything else is halfbaked, and in the case of protonpass i'd call it undercooked/raw.

[–] WeAreAllOne@lemm.ee 1 points 1 year ago (2 children)

+1 on that. They're still struggling to make a good app for VPN on Linux while every other provider has sovlrd this ages ago. But overall a good service.

[–] sanpo@sopuli.xyz 2 points 1 year ago

To be honest, that's probably less of a priority since most Linux users are likely to be comfortable with just downloading the configs and importing them into NetworkManager.

Personally, Linux VPN app is not something I ever had any interest in. I'd rather get a Drive sync client...

[–] ShroOmeric@lemmy.world 2 points 1 year ago

Yeah VPN app on Linux is ridicously bad.

[–] mintycactus@lemmy.world 0 points 1 year ago (3 children)

Both are ok, but Proton is too weird, also IMAP issue for Linux users makes it even worse. Posteo is probably better service, than both combined.

[–] RootBeerGuy@discuss.tchncs.de 1 points 1 year ago

Heh, weird. Thats some solid data you are bringing forward.

[–] Melpomene@kbin.social 1 points 1 year ago

I'm using IMAP on Linux; what issue are you seeing?

[–] weLookAbove@lemm.ee 1 points 1 year ago

How is Proton weird?