3 ms·

Question: beyond a certain degree, why would you try to save money on email that much? Email is pretty much the weakest link for most people from a security per

Question: beyond a certain degree, why would you try to save money on email that much? Email is pretty much the weakest link for most people from a security perspective (ie password recovery), so I would want my email provider to have enough resources to properly secure the thing. What are people using these providers for, and do you feel like they secure your mailbox enough?

arghwhat 5y ago
I use it for primary email, and based on communication with them and experience with Gmail and O365, certainly trust migadu more than the usual suspects. Remember that email communication, irrespective of provider, is not secret unless GPG or similar is used. If a MFA enabled account can be accessed with only a password reset email, it is fundamentally insecure.
- stingraycharles 5y ago
  While of course in theory you are correct, the fact remains that you are able to reset your password using email in many online applications, and that addressing this is out of control of the user. Using a secure email provider, however, is within control and can certainly go a long way in mitigating the risks here.
  - arghwhat 5y ago
    It does very, very little to mitigate risk when you are using an insecure medium. Regardless, their security is respectable and their fair simpler infrastructure makes me much more confident that it isn't full of holes.
donmcronald 5y ago
I use MXroute for low volume, automated email from software and devices. Having unlimited mailboxes (one per device) and super low (configurable), per mailbox quotas is a better solution than the expensive providers have. Office 365 is brutal for sending from devices. In fact it’s impossible with security defaults (more like overrides) enforcing 2FA and one of their supported options is literally (I’m not joking here) to use another mail server that’s not Office 365. https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365#use-your-own-email-server-to-send-email-from-multifunction-devices-and-applications https://docs.microsoft.com/en-us/exchange/mail-flow-best-pra...
herbst 5y ago
That's why I use protonmail and don't even know how much I pay. IMO email is the single most relevant part of your internet privacy and security. Nearly everything builds on it.

arghwhat 5y ago

I use it for primary email, and based on communication with them and experience with Gmail and O365, certainly trust migadu more than the usual suspects. Remember that email communication, irrespective of provider, is not secret unless GPG or similar is used. If a MFA enabled account can be accessed with only a password reset email, it is fundamentally insecure.

stingraycharles 5y ago
While of course in theory you are correct, the fact remains that you are able to reset your password using email in many online applications, and that addressing this is out of control of the user. Using a secure email provider, however, is within control and can certainly go a long way in mitigating the risks here.
- arghwhat 5y ago
  It does very, very little to mitigate risk when you are using an insecure medium. Regardless, their security is respectable and their fair simpler infrastructure makes me much more confident that it isn't full of holes.

donmcronald 5y ago

I use MXroute for low volume, automated email from software and devices. Having unlimited mailboxes (one per device) and super low (configurable), per mailbox quotas is a better solution than the expensive providers have. Office 365 is brutal for sending from devices. In fact it’s impossible with security defaults (more like overrides) enforcing 2FA and one of their supported options is literally (I’m not joking here) to use another mail server that’s not Office 365. https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365#use-your-own-email-server-to-send-email-from-multifunction-devices-and-applications https://docs.microsoft.com/en-us/exchange/mail-flow-best-pra...

herbst 5y ago

That's why I use protonmail and don't even know how much I pay. IMO email is the single most relevant part of your internet privacy and security. Nearly everything builds on it.