If you could have your email provider based in any country, which one would you choose? Which one do you think has the best privacy protections?
from zdhzm2pgp@lemmy.ml to privacy@lemmy.ml on 10 Apr 07:05
https://lemmy.ml/post/45720556

(This is a question for people like me who don’t self host their email.)

#privacy

threaded - newest

zdhzm2pgp@lemmy.ml on 10 Apr 07:10 next collapse

Iceland, maybe?

ShortN0te@lemmy.ml on 10 Apr 08:19 next collapse

Any legal hoster will have to give up the data to local LEA, eventually. I would rather go for a hoster that has proven to use encryption and is legally fighting any order they receive.

voxel@feddit.uk on 10 Apr 12:03 collapse

and is legally fighting any order they receive.

I don’t think a provider should fight any order, especially if the chance of success is low or basically zero. It’s also very expensive. A provider that doesn’t have the data in the first place, is legally speaking better.

ShortN0te@lemmy.ml on 10 Apr 12:11 next collapse

Not every order providers recieve is rightfull or legal or even fullfill the requirements of the law, or the legal forms are just not filled out correctly by the officer or department.

Fighting does not really mean, go to court, that would only really make sense for precedence, but more like “only do as much as you are required by law” and maybe “delay everything as much as you are allowed by law”.

skarn@discuss.tchncs.de on 12 Apr 00:08 collapse

Yes, that’s reasonable. That’s what e.g. mailbox.org does. And they publish periodic reports on how many requests they receive, how many they successfully reject, and how many they have to follow.

RogueBanana@piefed.zip on 12 Apr 05:43 collapse

But an email provider will have to retain the data unlike VPN companies. Personal details, maybe but there are ways to never share them in the first place but the unencrypted emails are always at risk.

Core_of_Arden@lemmy.ml on 10 Apr 08:41 next collapse

My own country. It’s very transparent here (DK)…

utopiah@lemmy.ml on 10 Apr 10:20 collapse

Makes me curious, I assume within the EU with GDPR it would be roughly equivalent.

What’s the difference between EU countries then and why?

Core_of_Arden@lemmy.ml on 14 Apr 21:01 collapse

Well, not all EU countries share laws. There’s the EU laws, and then there’s the countries own laws. We (here in Denmark) is often a bit more secure, than most other countries - and because my provider is in the country I live in, if there are any disputes, they can be settled here, without spending a million on lawyer fees… :-)

utopiah@lemmy.ml on 14 Apr 21:26 collapse

Which Danish laws go beyond GDPR?

Core_of_Arden@lemmy.ml on 15 Apr 19:20 collapse

Well, you should read up on the “Databeskyttelsesloven” for one… Or “data protection law”…

utopiah@lemmy.ml on 16 Apr 08:27 collapse

Thanks, skimmed through recordinglaw.com/…/denmark-data-privacy-laws/ but it’s quite difficult to do a “diff” between one and the other. From reading it I didn’t notice significantly better for my normal usage but I’m not a lawyer. It also makes me wonder, if you have done it, how do you know it’s not better than say another random EU country also national specific modifications, e.g. Slovenia? Is there any “benchmark” somewhere that identifies which national changes are better?

Core_of_Arden@lemmy.ml on 16 Apr 14:17 collapse

Are you here to troll, or why do you expect me to teach you on this subject? Seriously, if you need to compare all the laws, be my guest, but don’t be daft about it in here.

utopiah@lemmy.ml on 16 Apr 20:09 collapse

How is asking to justify a position trolling? You are the one who claimed that Danish law is better than GDPR. I didn’t claim you lie or that law elsewhere was better, I solely asked for the proof. It’s not because I mistrust you, I just want to learn and you saying it is so without an actual comparison is not enough. If you don’t want to help that’s perfectly OK you can just say so. It’s fine to say you prefer Danish product because they are better and refuse to give proof that it’s the case. It won’t help me nor others though.

It’s the Privacy community on Lemmy, I bet others would love to learn too.

Core_of_Arden@lemmy.ml on 17 Apr 17:39 collapse

Play innocent all you want, it just makes you look dumb too…

You are not asking me to justify, you are asking me to prove it, and to compare a lot of countries rules and regulations. That’s trolling. Do the legwork yourself, thanks!

utopiah@lemmy.ml on 17 Apr 21:48 collapse

OK. I’ll just claim French privacy law is better than GDPR then. If you ask I’ll just point you to French law. If you tell me that doesn’t help I’ll call you a troll.

I mean honestly if that’s how you interact with people I’d rather just block you, I don’t need more noise in my life. Take care.

Core_of_Arden@lemmy.ml on 20 Apr 15:31 collapse

Please do block me. I’d appreciate that. You are not here to learn or listen, you are here to make people do the work for you. Maybe you should go ask an AI, seems like you lack, what they claim to have…

commander@lemmy.world on 10 Apr 09:02 next collapse

One thing is that I email and receive emails from almost no one that uses an encrypted service on their end so I have nearly zero expectations when it comes to email. Regardless, as long as it’s encrypted so they have been demonstrated in court to not being able to provide the content of my emails and you can pay with some crypto, then I consider it good enough. Other thing is that regardless of what country you live in, a service outside of the country you live in. Preferably even countries that have the least if not just about no significant information sharing treaties. Maybe hostile to the country I live in is best. I have no concerns about law enforcement in other countries. My concern is the authority that I live under practically every day of the year regardless of their behavior in the present

Other types of services I have higher expectations for privacy like cloud storage

akilou@sh.itjust.works on 10 Apr 09:16 next collapse

Sealand!

utopiah@lemmy.ml on 10 Apr 10:23 next collapse

I’m not sure for what matters it makes a difference, namely en.wikipedia.org/wiki/Principality_of_Sealand#Leg…

Also AFAICT since en.wikipedia.org/wiki/HavenCo my understanding is that P2P and distributed technical solutions (torrent, Onion routing, I2P, bitcoin, etc) improved enough that it wasn’t really worth it.

jacksilver@lemmy.world on 12 Apr 05:56 collapse

Or space!

I feel like that’s the reason people have been talking about space data centers. Once it’s up there it’s kinda hard to get access to it.

Tenderizer78@lemmy.ml on 10 Apr 09:19 next collapse

In the case of email, security is more important than privacy. The country your provider is based in doesn’t matter.

Hypothetically if we were talking about something like a VPN, it would need to be a country which values privacy and which has a vaguely hostile attitude to America. I have no idea what country that would be.

[deleted] on 10 Apr 09:30 next collapse

.

racoon@lemmy.ml on 10 Apr 09:36 next collapse

E-Mail is only a privacy threat

voxel@feddit.uk on 10 Apr 12:04 collapse
sudoer777@lemmy.ml on 10 Apr 10:25 next collapse

Probably some island that hasn’t been discovered yet or my own pirate ship, that has the best privacy protections because then I’m the government

eleitl@lemmy.zip on 10 Apr 11:33 next collapse

My own tamper-proof server in a locked cage. There are no noncompliant jurisdictions.

blimthepixie@lemmy.dbzer0.com on 10 Apr 11:41 next collapse

trashbat.co.ck

DampSquid@feddit.uk on 12 Apr 06:17 collapse

Bunch of fuckzips

blimthepixie@lemmy.dbzer0.com on 12 Apr 13:10 collapse

I wasn’t sure how many here would get a Nathan Barley reference

DampSquid@feddit.uk on 12 Apr 13:30 collapse

I still rewatch it every few years, love it!

blimthepixie@lemmy.dbzer0.com on 12 Apr 15:32 collapse

It’s so good.

The guy is also in Benidorm and plays a very different character

voxel@feddit.uk on 10 Apr 12:01 next collapse

Germany, since I’m a German citizen and know my local rights and laws better than anywhere else. Also easier to take legal action against the company if they they mess up.

MonkderVierte@lemmy.zip on 10 Apr 12:11 next collapse

Why “could”?

HubertManne@piefed.social on 12 Apr 19:38 collapse

Like geni wish. Because my own country with it treats email the way it treats physical mail most stringently.