IE like Crypto AG:

In 2020, it was revealed that the Swiss company, Crypto AG, which provided secure communications services to ~120 governments throughout the 20th century, was secretly ran by the CIA and West German Intelligence. The CIA and later NSA were able to read encrypted communications for many countries such as Saudi Arabia, Iran, Italy, Indonesia, Iraq, Libya, Jordan and South Korea.

  • 45o3b@lemmy.ml
    link
    fedilink
    arrow-up
    2
    ·
    16 hours ago

    I intend to do that but basically wanted to have an off site copy, for both backup and deliverability purposes.

    I don’t have much in the way of privacy expectations for email, but I figure that Proton or Tuta are probably still safer than Google.

    • communism@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      15 hours ago

      I self-host on a VPS, so my off-site copy is the VPS, and my on-site copy is the emails downloaded to my email clients.

      I figure that Proton or Tuta are probably still safer than Google.

      Define “safer”. If you are receiving unencrypted emails (which is the case in the vast majority of cases), there is nothing stopping Proton or Tuta from reading them. Fundamentally, if something arrives at a server unencrypted, the server can read it—nothing can be done about that.

      If you’re exchanging e2ee emails, then it doesn’t matter if you use Google, because the body of the email can’t be read by Google. A lot of metadata is required to be unencrypted though (this is the case for Proton and Tuta too).

      I don’t really see the benefit to using an email service like Proton or Tuta from a perspective of meaningful data privacy. If it were between e.g. Proton and Google I’d probably pick Proton to avoid my emails being used to serve me ads from Google, but I wouldn’t have any illusions about Proton being able to read unencrypted incoming mail.

      • 45o3b@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        14 hours ago

        Yes, I know and agree that the mail providers can read unencrypted email. I’d just rather use a provider that probably isn’t intentionally using it to build profiles about myself and others.