Hacker News Reader

Comment by contextual | Hacker News Reader

NoMailbox has built-in encryption functionality. It's one of the many features and options in the new web interface.

To be clear, I'm just a satisfied customer. Using NeoMailbox gives me peace of mind. It's the best option I've found, and that's after months of testing many different paid and free email services.

View on HN

  Using NeoMailbox gives me peace of mind

This is essentially what I'm talking about. It probably shouldn't give you peace of mind. You click an 'Encrypt' button on a web interface and it encrypts it and sends it off. I presume that you can go into your 'Sent Items' and look at that email's contents even though you've encrypted it, yes? So it's either sitting there unencrypted on the server or they have the keys.

It's PGP sign/encrypt email with a passphrase option. There's also an option to read receipt.

Look, I'm not the sales department and I'm not going to hold your hand. Please, do your own homework.

While I appreciate the condescencion, their website says "We use OpenPGP" and doesn't specify how you can decrypt a message using their webmail client without storing (or sending) your keys on their server. If there is a workable solution to that, I'm genuinely curious about it.

I'm sure they're a lovely email provider, but when they emphasize 'Secure Email' the onus is on them to prove that their secure system isn't a series of wishes and 'trust us'.

Reply on news.ycombinator.com