4 ms·
> "But you still need to trust your provider" When it comes to the security or privacy of your messages, if you really, really need it, then you cannot trust y
by bad_user 8y ago
> "But you still need to trust your provider"
When it comes to the security or privacy of your messages, if you really, really need it, then you cannot trust your provider and that's the whole point of end-to-end encryption.
If you're an activist whose life would be threatened if those messages got out, then you'd better make sure that any information you leak to your email service provider cannot be tied to you, no matter how much you trust that provider.
> "if you and your correspondents use ~anonymous email accounts"
Note that anonymity is earned by you via the steps you take to open and use that email account.
For example, if you're logging in to that email account from your home IP and you're being targeted by some security organization or crime syndicate with enough resources, who your email provider is will be absolutely irrelevant.
- mirimir 8y agoOK, you're right. You can't trust anyone. > Note that anonymity is earned by you via the steps you take to open and use that email account. That's what I meant by "unless you trust your OPSEC enough". However, not all of us are " activist[s] whose life would be threatened if ... messages got out". So I think there is some value in providers who will protect you, if your OPSEC is weak. If nothing else, it's failsafe. Like climbing with a rope.