Who Runs Your Email? Revealing Tuta's Security with Hanna Bozakov

[@techlore]

Thank you Hanna and the team at Tuta for agreeing to come on and speak so transparently about some difficult topics! I learned a good amount about email services in this interview and I hope the rest of you do too! 00:00 Coming up 00:31 Introduction 00:58 Guest introduction 01:35 What is Tuta’s origin story? 05:51 What is the issue with Gmail? 08:15 What are the challenges with email? 10:20 Is there a benefit to using Tuta with non Tuta contacts? 12:51 How can you secure email with non Tuta contacts? 15:27 Is Tutanota dead? 18:05 How does Tutu’s encryption work? 20:12 Does post-quantum encryption apply retroactively? 22:08 What is Tuta Drive? 23:42 What is the long term vision for Tuta? 25:16 How do Tuna’s push notifications work? 25:58 Why does Tuta have a focus on F-Droid? 30:17 Why does Tuta use renewable energy? 32:48 What happened with Tutu’s German court case? 39:32 Why do you value privacy? 40:37 Why does Germany care so much about privacy? 44:26 Conclusion of interview 45:14 Wrap-up and Outro

[@omar-p7w5j]

Hey Henry you and All Things Secured, NBTV, and The Hated One, you guys are the reason we're really starting to take our privacy seriously. We appreciate all the effort you put into educating us. Thanks a lot, we love what you're doing!

[@bananadane]

I would love it if tuta, proton, and some other privacy focused encrypted email providers could agree on a common protocol for interoperability

[@code-cove]

Womp womp

[@Mic-Mak]

@@code-cove Why womp womp? It's a great idea. FYI, Proton has PGP as an option.

[@code-cove]

@@Mic-Mak FYI it won't happen 🤡🤡

[@Mic-Mak]

@@code-cove Various e-mail providers have PGP, meaning that you can send E2EE e-mails from Proton to those addresses. Why are you so sure that Tuta will never support PGP? PGP predates Proton.

[@mrcvry]

For example if you use Proton with your own domain and you want to switch you can just download your PGP key and move your domain elsewhere.

[@Cinemafixed-wh8kh]

Ever since I watched the Hated One 6 years ago, I have gone down the security rabbit hole. Proton account, Tuta account, I run Linux desktop and CalyxOS on my phone. You and THO have been a big help in navigating the online world. Great channel.

[@techlore]

you have no idea how much that means

[@ghosthunter0950]

@@techlore Hey man, young guy here that also gained a lot more awareness about privacy and security because of your videos. I was already in the privacy/security space but your videos are some of the most comprehensive for an outsider coming in that needs info on what to use without doing hours and hours of of research. once I finish my CS degree and get a job I'll be sure to give a nice donation for the time saved and all the useful info.

[@RomanBellicTaxi]

The Hated One. Damn, a long time. Yeah, I already had that uneasy feeling without knowing how to describe privacy and stuff - at most I had (paid) AdGuard running because of Xiaomi systemwide ads - and The Hated One hit the nail for me. Since then I've gone the path of compartmentalization (is this correct?) and discovered Proton, Tuta(nota), Mailfence, Techlore (and some other channels - but Techlore is the one I watch the most, alongside Surveillance Report), Mullvad, PrivacyTools, PrivacyGuides, the privacy subreddits and much more. So many resources, so much to learn, so much to change. We keep walking.

[@nealthompson404]

Thank you Hanna/Tuta, and thank you Henry/ @techlore ! All FOSS/privacy-focused projects: Please take note! The general public needs to see MORE OF THIS! Nothing beats public media promotion done by a live human being. All FOSS/privacy-focused projects: Send out your representatives. Find platforms. Do interviews. This needs to happen a whole lot more frequently.

[@techlore]

awww thanks for this!!!

[@sphillips8299]

Great interview Henry! Very informative. Hanna’s enthusiasm is infectious.

[@seandooley7205]

Amazing. I'm GenX & fairly clueless while SIMULTANEOUSLY NOT clueless regarding Natural Law & Human Rights. Illuminating interview for me. Thank you.

[@tommyaudio]

huge, very glad to hear about tuta! definitely getting it and telling as many ppl as i can about it. they sound awesome

[@fred-x3s7e]

i enjoyed that, ive been using tuta for a while along with another privacy email app but this week decided to make tuta my primary email app.

[@duncanny5848]

Got myself a Tuta email account to try it for myself entirely due to this great interview. Thankyou

[@rovase100]

Great interview. We have to spread the end- to-end encryption message to our circles and more and more users will use these providers.

[@GangStar_6]

Amazing interview!

[@fred-x3s7e]

Just one disappointment with Tuta being that in spite of having access to multiple private domains and aliases , only one email signature is possible per user account. This means that I cannot have a business signature and a personal one without adding it manually for each email. Does anyone know of a workaround for this limitation?

[@2dcatgirlirl]

thank you for this video

[@ralphwuu]

I like the interview, but a thing I can nitpick is the editing. The chat bubbles could not take such long time to transition in-and-out.

[@mrcvry]

Mailbox advantage. You are free to keep your PGP passphrase to yourself.

[@Dar123abc]

I know I am but I think Henry is also enchanted with Hanna.

[@MrFirsito]

yes, Tutanota was good on original language, but sound real weird on spanish language, even weirder on italian, which is close to the original language so change the name is a good move

[@zoenagy9458]

BS. email is raw text on receiving side, e.g. gmail :D you need tuta to tuta for E2E

[@thecrowpit24]

I try to create an account with tuta but I couldn't because I use a VPN. Apparently they hate vpn.

[@TutaPrivacy]

We don't, but some connections get blocked because of too many signups via these VPNs. Could you try a different server? You can also use your own IP to sign up as we don't log IP addresses by default. Once created, you should be able to use Tuta Mail with the VPN.

[@andyroid5028]

​@@TutaPrivacy _This is the type of customer service that raises eyebrows (the good kind). Thanks for the quick response to this user!_

[@0xAnnan]

If we send an email that is locked with a password, how do we tell the recipient what the password is? 😅

[@techlore]

The idea is you have a separate channel to give them the password. Like a messenger, telling them in person, etc. But yes, it's hard to do if you only have a single point of communication.

[@buggiemara4902]

How's Tuta these days? Do they still experience DDOS? I deactivated my account because of the DDOS.

[@SlitheringDemon]

Love it

[@basdfgwe]

After watching this I was intrigued, but it came crashing down when I realised that it is from Germany. That's a hard no.

[@CrisCheese_]

what else do u suggest, its in the eu like there are no better privacy laws to my knowledge

[@shwnzp]

Why doesn’t Tuta support 2nd-step verification???

[@gitcat6671]

tuta does support 2 factor authentication, it has been for many years.

[@lussor1]

Bad thing they delete inactive accs after 6 months

[@lcbryr]

pay then lol ((((, but still if u don t use it u have backup for sure, so it s good

[@inthelineoffire2250]

Big Brother is obviously screwing with my Tutamail account.

[@zine_eddinex24]

cool

[@Lili-xq9sn]

21:50

[@LeonEdwinsHeart]

Tuta or proton 🤔

[@obelixer9751]

How does Tuta get paid? Since we are all suckers for "free" services and that's what started the whole issue here. (Free means we sell your data)

[@andyroid5028]

VERY good question.👍🏻

[@mrcvry]

Storage! The free tier doesn‘t have much.

[@danheri9624]

They're a freemium service. You can subscribe to their plan to add features like additonal email aliases, more storage, custom domains, more calendars, etc.

[@lussor1]

Email is not hard and expensive to host. Proton gives 1GB free of storage

[@mrcvry]

@@lussor1 Strange that one of the most expensive has become one of the cheapest. Crazy non-profit companies! 😁

[@pelic9608]

Aaand the correct answer iiiis: I'm running my email.

[@sotecluxan4221]

!!!**

[@bolle666]

Just accept that things like SMS and email are not secure and send confidential stuff via Signal.

[@tiredofeverythingnew]

Tuta is like a service from the early 2000s - old clunky UI, and crap technical support. Their recent decisions have been very questionable. I moved to Proton this year and have never been more happy.

[@lussor1]

What decisions?

[@Ayyfren]

Same.

[@johanosborn-gl5it]

Agree. So many years gone and they looking like my grandads shed

[@basdfgwe]

never heard about tuta tbh.

[@4ida]

tutanota is just as bad as protonmail tbh (as in you've locked in with them for life, if you ever decide to upgrade and fully use email)

[@tegesno]

I`m use tuta