How to use e-mail?

I currently use two e-mail addresses, one I got from my ISP, and one I can use with the webmail hosted on my website (simple hosting service, one of these FTP-only LAMP things). There are two reasons why e-mail matters to me. Firstly that for an enormous amount of web services e-mail is required and is used for password resets. So access to your e-mail basically is access to almost everything for which you signed up using this e-mail address, except for maybe some services which use two-factor authentication. That's the security side. Then there's the privacy side. Though not used that much anymore (by me at least) e-mails are used to communicate to people, and I'd prefer this communication to be private. For something like FTP I just use an old PC that's physically in my home which only accepts connections based on SSH-key. The only way to crack that is through a very severe security bug, and if someone cracks it, it's not the end of the world for me. But it looks to me like this self-hosting is very impractical to do with e-mail, so that's not really a solution. But when I use some online service, I don't feel like I can really trust them with either my security or privacy.

The only way to be completely sure that you can trust whomever is hosting your emails is to host it yourself. However, many residential ISPs block the ports required to self-host an email address. If you find yourself in this situation and need to trust someone else with your email hosting, then you may want to find one who completely encrypts emails making them unable to view your emails even if they wanted to. Providers such as Protonmail do this. I would also advise choosing a provider outside of the Fourteen Eyes (https://en.wikipedia.org/wiki/UKUSA_Agreement).

>>3869 use your website email to create 1 time use aliases for registering to services you use and delete them once you've registered (i.e. i delete mine maybe once a month) . This takes care of people who hack databases on both sides (increases the burden heavily anyway). you can always re-create the alias if you need to re-verify and it's going to be extremely confusing for anyone but a skilled adversary. obviously, enable 2-fa on things that you can. no advice on uncle sam other than email is insecure and not private and you should use pgp and remailers as much as possible if you are paranoid. If you are being targeted directly us will undermine whatever petty security you have whether you host or not seeing as how the nature of email servers is that they are always running and when you access it from your client pc emails are just chilling in memory too. RATs, attacks from the other side and 1000 etcs. self-hosting isn't hard but getting a PTR record from your ISP is so goodluck with that too. tl;dr : e-mail isn't private in the eyes of the law and e-mail as an identity mechanism is complete foolishness so use tricks to undermine it as much as possible

>>3871 p.s. here are some resources for hosting your own e-mail on a vps or at home: https://github.com/Kickball/awesome-selfhosted#email https://workaround.org/ispmail/jessie

>>3871 > If you are being targeted directly us will undermine whatever petty security you have whether you host or not seeing as how the nature of email servers is that they are always running and when you access it from your client pc emails are just chilling in memory too. It's not that bad; As far as privacy goes I'm just trying to avoid all my data being part of mass-surveillance and the latest big-data pet projects of various companies.

>>3870 > one who completely encrypts emails making them unable to view your emails even if they wanted to Where can I get this though? You say Protonmail but the info I find on Protonmail is not convincing.

>>3875 The Privacy Tools website has a good section comparing email providers for privacy. https://www.privacytools.io/#email

>>3874 using a POP3 mail client that deletes copies from the server on receipt can help with that. sounds like you're probably doing enough just by self-hosting, or hosting on a vps from a provider with good terms of service. At the same time, most users you talk to are probably using gmail, yahoo, microsoft business custom domain emails etc. most of which will be analyzing and using the e-mails / attachments you send. In china it's common to write something and take a picture of it and attach to an email in order to escape mass surveillance.

>>3877 I'm going to go out on a limb and presume that working OCR for Chinese is still wip?

>>3878 more likely that running ocr on every e-mail attachment in china would cause more overhead than the government is willing to pay for.

to be honest i just use sovereign, you have to be kinda Linux/DNS/etc saavy, but since you're posting in lainchan I assume it won't be a problem. https://github.com/sovereign/sovereign

>email >ftp >le no logs >le ebil boogle >le host it from your home Encrypt your soytea if you want privacy, every ISP/"condensed atmospheric water" hoster is snooping, especially if they claim the opposite. No exceptions. >>3870 >find one who completely encrypts emails making them unable to view your emails While also making a separate cleartext copy, storing all your logs and IP addresses you connect from, and then happily giving them upon request of some third world dictatorship court order >outside of the Fourteen Eyes Also outside EU, BRICS, EACU, APEC and LAG. Whoops, it seems only Liberia is left, and they have internet there because US military bases need it. >>3935 larpchan users unironically defend discord and telegram as "privacy-respecting messaging apps", you're of too high opinion about local folks.