Article 10 of the German has provisions that allow bypassing all data protection law. All providers above 10,000 users are required to install governmental snooping devices that are capable of getting full emails and not "just" metadata. And the 4th amendment of the US constitution does not protect you in Germany.
So as far as Germany is concerned you may just be worse off than hosting with Google.
I'm a big proponent of paying for your service, the €1,- per Monat is reasonable instead of the rediculous 10,- per Monat you pay at some of the other privacy respecting services.
Is 120 per year really ridiculous? (I assume Monat -> month). For something as crucial to online comms as email I'd be happy to pay if it was as reliable as other offerings (and ideally extensible in some form - e.g if it could do contact/calendar sync too).
I'm considering trying out https://mykolab.com at some point as it looks like it might meet my needs. That looks like it would be around $12pcm.
Isn't that how it is working? For example The cost of bandwidth is 10x less in US based datacenters, compared to Indian datacenter (despite lower wages/other costs)
300 GB transfer Vs 30 GB transfer. Who would you host your services with?
If you are concerned about your security (not that I'm validating Mailbox.org), don't always go for the cheapest options; Or as uncle Sam says
That is the one I was referring to. I don't think it reasonable to ask €10,- per month because that is just ridiculous compared to the costs that they are making.
Of course it is an important service. But it would also be outrageous to ask €1.000 for a bottle of water when someone is dying of thirst in the desert. That would just be a dick move. Although less extreme, mykolab is similar.
Site's still lacking some details, but as far as I understand:
- really good SSL grade (A+, see [1])
- SSL only
- HSTS to prevent http connections
- You can select to send from your 'secure.mailbox.org' alias, which seems to enforce TLS for smtp (and WILL break if the recipient doesn't support it, they explicitly want that)
- You can enable DANE, enforce DANE, require that the server already knows the certificate of your target domain
- They have 'easy' explanations on how to use PGP
- There's an option to encrypt your whole mailbox on the server ('neither the police nor we can read your mails'), but I couldn't find details about that
Note: Not affiliated, not a customer, merely reading the site myself and German's my native language.
About PGP encryption. You can enable Inbox Encryption in the settings. You enable it and paste your public PGP key in as well, and all incoming emails that are not encrypted will be encrypted using your public key.
You can also force the use of SSL/TSL for all emails in the settings, so that you do not have to use the "special" address for that.
PGP is not necessarily "unusable" on Mobile. I use K-9 Mail + APG (both free) on Android, and can read and write inline PGP signed/encrypted mail. It's a shame there's no PGP/MIME support though.
As much as I appreciate their kind offer to compromise my key and hand it to the German authorities for forwarding to the NSA, I must politely decline. ;)
It also does not allow this 64 character string:
t9fvwlh8x4IQbXyqegNxCHYYvSKAMEfgrnSI0dIoFLmNyPq31TVZifSWgORG80rT
Claiming it is 'too simple' or 'a dictionary word'....
This is not going well....
Edit: it DOES accept this as a password: aKMDN47Ifdpg
Nope.