20 ms·
If the automated system fails and you have 2fa, then it gets escalated to the two most senior members of the security team. In some cases we haven't had suffic
by brongondwana 9y ago
If the automated system fails and you have 2fa, then it gets escalated to the two most senior members of the security team.
In some cases we haven't had sufficient information on the account to ever verify that account's owner, and they never got their account back. Some users refuse to give us enough information to allow us to later positively identify them - so yes, those people will be out of luck if they lose their credentials.
- hitekker 9y agoAt this point, you should write a blog post to address the myriad of concerns popping up in this thread.
- brongondwana 9y agoWe're working on that! It may not be finished today.
- hitekker 9y agoThat's fair. I respect that, as CEO, you're genuinely responding to your customers in this thread instead of fobbing it off to someone else. Hopefully, this can all be explained, resolved, and /or remedied in good time.
- jf 9y agoI agree with hitekker, I'm feeling pretty nervous about being a FastMail customer right now and will start looking for a more secure alternative now. The main reason I moved to FastMail is because I stopped trusting Google to keep my mail secure.
- tptacek 9y agoGoogle is the gold standard for email account service. Nobody in the industry does a better job at that one thing than Google does.
- mythz 9y agoCould you share some info/links on what makes it the Gold Standard?
- pvg 9y agoCan you think of some info/links that would suggest the opposite?
- mythz 9y agoI'm not looking to discredit the claim, I'm genuinely curious to learn about what they've done to earn the Gold Standard from @tptacek Google were previously reading our emails for Ad purposes and some of their employees are still able to read our Emails, their privacy policy also indictates they will hand over our emails if requested by law enforcement which suggests it's weaker than protonmail.com end-to-end encryption: > All emails are secured automatically with end-to-end encryption. This means even we cannot decrypt and read your emails. As a result, your encrypted emails cannot be shared with third parties. If this is the case, how is Google being held as the Gold Standard?
- pvg 9y agoI'm genuinely curious to learn I get and am not questioning that. It's just that your curiosity doesn't seem to have motivated you to do a first pass of, I don't want to call it 'research', but just basic poking around on the topic. You want links and info from some dude on the internet because what he says contradicts stuff you know from... something a vendor said about their product. It's a totally sensible question but it's not some particularly arcane mystery to dig into. In tptacek's case, in a jiffy, you can bring up the 60-odd comments of his that mention 'Gmail' and get a reasonable idea of what he thinks of it and why. And if you think he's got it wrong, you can say, hey, tptacek, I think you're full of poop when you said [...]. And then maybe you can hash it out and one or both of you will learn something. But 'Citation, please', especially on trivially searchable topics mostly says 'I'm kind of curious, but I don't really care'. The person you're asking probably isn't going to care either.