CTemplar "Armored Email"

Privacy Tools Providers & Services
#4

I use all of them, just to clarify. Since they are hosted on Iceland and their laws regarding privacy are one of the best in the world that gave me trust, since they also meet the same security standards (or even better?) and since they have opened their source faster, are already developing an F-droid application, and they listen to you on their GitHub it seems like a good option.

CTemplar: https://www.hardenize.com/report/mail.ctemplar.com/1581655196
Protonmail:https://www.hardenize.com/report/mail.protonmail.com/1582127300
Tutanota: https://www.hardenize.com/report/mail.tutanota.com/1582127558

#5

I tried to signup, but failed on the username.

Even though they state " The username must start with a letter or a number and end with a letter or number.It may only contain a-z , A-Z , 0-9 or ._- ‌characters, and minimum length is 4 characters." they would not let me start a username with a number.

Hope they fix it.

#6

I could create an issue if you want, I remember the same happened to me now that you mentioned it.

#7

that would be fine, thanks

1 Like
#8

I’m on “Safer” level. I’ll try on “Safe”

#9

I’ve been looking at CTemplar for a while for moving my main online accounts emails from Posteo into it. The one thing that I’m still waiting on is the ability to download all emails with POP3 over SSL.

#10

It seems it works on Tor, just on the lowest “Safe” level. On that level you can use it with no issue.

#11

As far as I know it’s possible.

I’ve tried it on Safer, too, and it took longer to load, but it works.

#12

when you connect to any onion url your full session is encrypted, the photo thing maybe they use http source

Also for me i did not try it but i’m sure they got access to ur data (every email service does in fact every server owner does even PTIO on their servers) and i see its not bad thing i mean it depend on owner. anyway, i just mean use whatever service you want while hiding as much as you can data so in emails you can use PGP so you are safe from knowing your Place because you using tor it just use pgp with it

#13

This is an interesting article regarding the use of encrypted email…

Email is unsafe and cannot be made safe. The tools we have today to encrypt email are badly flawed. Even if those flaws were fixed, email would remain unsafe. Its problems cannot plausibly be mitigated. Avoid encrypted email.

https://latacora.micro.blog/2020/02/19/stop-using-encrypted.html

1 Like
#14

Good article, it’s true and expands on what PTio says on their e-mail section, but we still need it.

Even when using end-to-end encryption technology like GPG, email is inherently insecure and should not be trusted for sensitive communications. Metadata is always communicated in plaintext, and even when encryption is used correctly it is very easy for either party to accidentally respond to or forward a previously encrypted message in plaintext in many clients. GPG also does not easily support modern crypto functionality such as key rotation and forward secrecy.

We recommend the following email providers for routine notifications and messages from other services that require an email address. For communications that need to be safe and secure, you should use a dedicated instant messaging tool, such as Signal.

1 Like
#15

Best solution would be to get everyone of your contacts onboard a private messenger and ditch email as much as possible

#16

Or to not talk with anyone.

#17

lol, that is an option too

#18

That may actually be closer than we think, hopefully: https://www.politico.eu/article/eu-commission-to-staff-switch-to-signal-messaging-app/

1 Like
#19

“We are tired of US gov spying us, so please stop using USA based communication services and start using USA based communication service” :d

#20

Is this a reference to Signal or what?

#21

Already fixed.

You really don’t have to use https with .onion URLs, so it’s not a maybe, they use http .

They have removed Google fonts also, so yay for them!

1 Like
#22

Alright, learned new info!

#23

Is not a reference to any particular service, I think it’s interesting to see that a tool that gets recommended frequently here and other privacy forums, is now also being used at ‘higher’ levels.

Jurisdiction is important but the technology used is (at least) just as important. Look at it this way: since the communications compromised already, there’s nothing to lose with this switch.