Listen to this Post
The rivalry between Tuta (formerly Tutanota) and Proton Mail highlights the growing demand for secure, privacy-focused email services. Both platforms promote end-to-end encryption, but their recent public spat on LinkedIn reveals deeper tensions in the privacy community.
Background:
- Proton criticized Tuta’s deGoogle campaign for not listing Proton Mail as an alternative.
- Proton’s marketing team upvoted their comment to dominate visibility.
- Tuta challenged Proton to reciprocate by including Tuta Mail in Proton’s recommendations.
4. Proton has yet to respond.
Reference: LinkedIn Post
You Should Know:
1. Comparing Encryption
- Tuta: Uses AES-128 and RSA-2048 for encryption.
- Proton: Uses AES-256, RSA-2048, and elliptic-curve cryptography (ECC).
Verify Encryption (Linux):
openssl enc -aes-128-cbc -k "password" -in plaintext.txt -out encrypted.bin openssl enc -d -aes-128-cbc -k "password" -in encrypted.bin -out decrypted.txt
2. Self-Hosting Alternatives
For those distrusting third-party providers:
- Mailcow (Docker-based):
git clone https://github.com/mailcow/mailcow-dockerized cd mailcow-dockerized ./generate_config.sh docker-compose up -d
- Proton Bridge (Local Client for Proton Mail):
wget https://proton.me/download/bridge/protonmail-bridge_3.6.0-1_amd64.deb sudo dpkg -i protonmail-bridge_.deb
3. Email Anonymity Tools
- Torifying Thunderbird:
sudo apt install torsocks torsocks thunderbird
- Burner Email CLI (TempMail):
curl -s https://api.tempmail.lol/generate | jq
4. Monitoring Email Headers
Check for metadata leaks:
curl -s https://mail.google.com/mail/u/0/inbox | grep -i "received:"
Or analyze headers manually:
python3 -m pip install email-analyzer email-analyzer --file email.eml
What Undercode Say:
The feud between Tuta and Proton underscores a critical truth: no service is perfect. While both advocate for privacy, their centralized models still pose risks. Self-hosting or combining tools (e.g., Proton Bridge + Tor) offers stronger guarantees.
Key Commands to Remember:
- GPG Encryption:
gpg --encrypt --recipient '[email protected]' file.txt
- Wireshark Filter for SMTP:
tcp.port == 25 || tcp.port == 587
- Detect Email Tracking Pixels:
grep -Eo '<img.src="http[^"]+"' email.html
Prediction: Expect more privacy services to adopt quantum-resistant encryption (e.g., CRYSTALS-Kyber) as governments push back against E2EE.
Expected Output:
A technical deep dive into email security, actionable commands, and a call for decentralized alternatives.
Relevant URLs:
– Tuta Encryption Whitepaper
– Proton Mail Security Details
IT/Security Reporter URL:
Reported By: Sam Bent – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅
