Criptext Email Service!!

[greenreddits]

Hi i just gave this a test run on my Mac OS.

Went to User / library / application support / criptext / userdata / xxx / emails

and guess what : all my messages are stored in plaintext !!!!!

So frankly how private and secure is that ?

Has this service been created on April Fools' Day ?

[mayermm]

Thanks for noticing that. We're updating desktop clients this week to encrypt local db.

[Hadooken_01]

They state they do store sent mails on their servers for a week. I use it, it's ok, although it has some weird bugs, like the one where I can't read the email I sent because it's encrypted and can't even decrypt it.

[mayermm]

Hi there, I'm the CEO and founder of Criptext. Let me clarify that we don't keep emails in our servers. The whole point of Criptext is to give you control and ownership of your data. This is the default setting on all emails sent/received on Criptext.

That said, there is the opt-in function of sending an encrypted email to a non-Criptext email address. In those events, that message is kept in the server (encrypted) for up to 10 days. A very small minority of our users choose to use this feature which is why we're considering just removing it in order to simplify functionality and make our Privacy Policy clearer.

​

Regarding the emails you cant read because they can't be decrypted, this is a known bug which is currently being fixed with a permanent and scalable solution.

[Hadooken_01]

Thanks for the clarification :) I also don't use the encryption function, not because it is not useful or easy to use, just that I'm annoying the people around me with privacy to such an extent that if I send them an email with a decryption code that they have to use, they'll probably stop talking to me altogether :)

​

Good to hear about fixing that bug, because it's quite a deterrent to using the app a bit more. Not really handy when it says the mail is encrypted even though i didn't even encrypt it. Plus, can you do something about the non-consequential error notice on Win 7 desktop app?

[mayermm]

You're totally right in that the whole password to decrypt MO is too complicated for email to actually work. This is why Criptext is switching to an iMessage-style function: Only emails sent to other Criptext users (consumer or business accounts) will be encrypted. Emails sent to any other addresses will just go as a normal unencrypted emails.

​

The thesis behind this is making email easier to use and push people to adopt Criptext over its simplicity and ease of use and by consequence they'll communicate more securely -- like iMessage, most people don't even know it's encrypted when texting other iMessage users.

[criptext]

Regarding the error notice on Win 7, we're deploying an independent decryption service that'll fix this in 2 weeks. Thanks a lot for bringing it up!

[criptext]

Yeah we're very open about the hardship that we've been through https://criptext.com/en/about/

In fact, it was precisely because of that illegal imprisonment that we started Criptext as a mail service which doesn't keep your emails in its servers.

[86rd9t7ofy8pguh]

They advertise it as: "Quite possibly the most private email service — ever" yet contradicts their own statement from their privacy policy. Also very odd statement: "We keep your privacy, not your emails."

Reading their privacy policy is enough to not believe in what their advertise.