While I think this is needed, the question has to be asked: How is this open? Is it open source, or open as in freedom?
There might be a promise not to sell data, but you aren't doing any client/server encryption to prevent yourselves from reading it. If a government sent a request you couldn't deny, data could still be collected. Gmail has HTTPS, but everyone agrees that only protects from MITM attacks from the hacker in the coffee shop, not the one in the datacenter.
The software used in the mail stack is purely open source software. Looks like they are running a fairly standard Postfix stack and are using roundcube for webmail [1].
I'll stick with my current solution of lavabit (which encrypts all mails stored on their server) [2] and running my own roundcube instance for when I need webmail.
The software used in the mail stack is purely open source software.
Does that really matter? I don't think the solution for people wanting to move off of GMail is to set up another company that stores your email.
What I'd love is a physical box I can plug in at home which stores my email and provides all the tools which GMail does (web/mobile apps, features, etc).
Even then, I'm not sure I'd switch. This is a tough nut to crack...but it's promising to see people trying. Hope something comes out of all the work going on in this space.
The fact that lavabit unexpectedly went down last night (and is still down) without them announcing it beforehand, or saying when it will be back up, is really annoying me right now.
Comments
While I think this is needed, the question has to be asked: How is this open? Is it open source, or open as in freedom?
There might be a promise not to sell data, but you aren't doing any client/server encryption to prevent yourselves from reading it. If a government sent a request you couldn't deny, data could still be collected. Gmail has HTTPS, but everyone agrees that only protects from MITM attacks from the hacker in the coffee shop, not the one in the datacenter.
The software used in the mail stack is purely open source software. Looks like they are running a fairly standard Postfix stack and are using roundcube for webmail [1].
I'll stick with my current solution of lavabit (which encrypts all mails stored on their server) [2] and running my own roundcube instance for when I need webmail.
[1] https://openmailbox.org/licences.php
[2] http://lavabit.com
Does that really matter? I don't think the solution for people wanting to move off of GMail is to set up another company that stores your email.
What I'd love is a physical box I can plug in at home which stores my email and provides all the tools which GMail does (web/mobile apps, features, etc).
Even then, I'm not sure I'd switch. This is a tough nut to crack...but it's promising to see people trying. Hope something comes out of all the work going on in this space.
I used to use Lavabit, but made the switch because of their policies and logging:
https://github.com/nylira/prism-break/issues/284
The fact that lavabit unexpectedly went down last night (and is still down) without them announcing it beforehand, or saying when it will be back up, is really annoying me right now.
This might be why... https://lavabit.com/