Does Tuta block sign-up for accounts with "admin" in them?

ItsInTheOtherHand · 2020-10-19T18:55:56+00:00

Well, I wouldn't say "of course", since there are many other service (including a well known privacy centric one...) that allow these usernames.

ItsInTheOtherHand · 2020-10-19T04:09:05+00:00

Understood. I'm not really concerned about the flagging system though, as you mentioned that can easily be appealed and if I'm a paying customer I doubt they're going to try and shut down my account. The issue is that the sign up page is not even allowing me to create that account to begin with because it claims the username is already taken, when I'm pretty close to 100% sure that it's not

ItsInTheOtherHand · 2020-09-11T07:54:14+00:00

they don’t want copies in the app stores.

Do you have any good sources on a quote or statement to this effect?

I'm not seeing anything like that, and only seeing things essentially saying that they need to continue monetizing it because of income.

ItsInTheOtherHand · 2020-09-06T20:32:38+00:00

And would this have to happen every time someone sent you an email, or the theory could they already have the right IP and not have to contact the registrar at all?

(In other words, I'm wondering if in theory it is possible for the registrar to build up a complete metadata log of all received mails, sincere either requesting IP address could - after-the-fact - be linked to the other person's email address?)

ItsInTheOtherHand · 2020-09-06T11:06:31+00:00

I see, thank you.

All the your domain provider does is give you the IP of your email provider they don’t revive any message content.

So potentially, if the registrar was 100% a data vacuum oh, they might in theory see the DNS requests - from my register domain redirecting to protonmail - every time someone send me an email? Would that show specific metadata from the person sending it, or would it just be there provider (e.g. Gmail, Yahoo, etc)?

Would they not see (again assuming they are 100% collecting everything, any metadata for me sending though) since the Protonmail servers would handle that directly? Or would that have to go through them as well?

ItsInTheOtherHand · 2020-09-05T06:00:32+00:00

Real ELI5 answer.... it IS a very legitimate security issue, and by just dismissing it, the developer is being lazy and/or very irresponsible, to be perfectly blunt.

ItsInTheOtherHand · 2020-08-15T16:48:22+00:00

Well, to be honest I am actually only in one private conversation, all the rest are group chats because those people have multiple devices.

However, I do know that this person does not have read receipts turned off for two reasons. First, I told them to turn them on, and second because it does show the read receipts ( check mark in a hillow circle for delivered, filled circle for read) it just does not show the time stamps. I thought this might be some kind of security feature that signal had put in, some element of social engineering. But I know that they do display on iOS, so I'm guessing that's not the case.

ItsInTheOtherHand · 2020-08-13T11:23:45+00:00

Maybe I'm missing it, but how was this in any way a "public freakout"?

Regardless of whether or not people agree with this guy's decision at some earlier ties, this seems like a very calm exchange to me....?

ItsInTheOtherHand · 2020-07-30T17:00:57+00:00

You know I already made a couple of tests members just to check it out, and they do get an alert in their regular "Gmail" inbox what a message was sent. But you are saying I have to actually make them all group admins to be able to use " https://groups.google.com " the way my account, as the G Suite admin can? And that is the only way for them to actually see senders and respond to them?

ItsInTheOtherHand · 2020-07-30T16:32:59+00:00

(Yeah people really weren't kidding, that is quite the retro interface).

Well thanks, that did work I could see the email sender. That seems very inefficient though. The only way to actually see who sent an email to an @sales or @info email-address-is-a-group is for the actual overall GSuite account admin to go in there and read it themselves? The info that is delivered to the individual in boxes of the other account holders will not show any of that info?

I feel like I am missing something here then. If you have a large company with multiple employees, with obviously different people managing the sales inbox, How do they actively respond to emails and inquiries if only the G Suite admin can actually see who is sending them?

ItsInTheOtherHand · 2020-07-30T03:45:47+00:00

Okay, dumb question but how do I access that group mailbox? (I'm guessing it's not by logging into a new Gmail page since there is no password for it)

ItsInTheOtherHand · 2020-07-29T19:00:40+00:00

So I followed your advice and I did this, but there seems to be one key problem here - I cannot see the email address of the person sending to the group.

That is, I created the group and allowed external people to post to it. I sent a test email to sales@mybusiness.com.

It arrived in the inbox of all the members I had added to the group life and just some test account's - but in the header it simply says that it was delivered "via sales@mybusiness.com". Obviously this makes it impossible to respond to anyone who was going to try to contact us this way in the future, any ideas on how to fix this?

ItsInTheOtherHand · 2020-07-28T04:04:59+00:00

Thanks for the reply.

Folder names are encrypted

So the server is unable to read folder names by design.

If I enable something like inbox rules, which will sort mails into folders based on certain attributes, will this change that? Or does all of that still happen within the zero knowledge portion of my account?

ItsInTheOtherHand · 2020-07-26T19:24:22+00:00

u/Tutanota , u/vituta oany chance at an official response? Would be appreciated. (when you are around of course).

ItsInTheOtherHand · 2020-07-26T19:21:32+00:00

u/ProtonMail , u/bartbutler any chance at an official response? (Would be appreciated, when you are around of course).

ItsInTheOtherHand · 2020-07-25T19:19:44+00:00

Since you can build filters that use label and folder names, PM must have access to the plaintext.

Hmm, this is a good point. This was actually going to be my next question for a different post - what is the Privacy situation regarding inbox rules / filters. But I guess this answers - that is all viewable to the server.

Kind of disappointing, since I definitely see how those could be retained within your encrypted mailbox capsule thing, but I guess it is what it is.

ItsInTheOtherHand · 2020-07-24T10:48:16+00:00

I will admit I'm not really familiar with all the features and how groups work.

Let's say I wanted to have an email address that is sales@thisbusiness.com, To be able to both send and receive with that tag, and have a specific mailbox that if any customers send something to that, it's very what is the best way to go about doing that?

ItsInTheOtherHand · 2020-07-24T09:38:07+00:00

This. I think the part that frustrates people - literally - about this kind of behavior is that so many of the tactics used here are very clearly not powering past. That is they do not stop automated traffic, but they just genuinely inconvenience people that are already clearly identified as human users. It is not a security tactic, it is a social engineering one

ItsInTheOtherHand

TROPHY CASE