If you could have your email provider based in any country, which one would you choose? Which one do you think has the best privacy protections?
from zdhzm2pgp@lemmy.ml to privacy@lemmy.ml on 10 Apr 05:05
https://lemmy.ml/post/45720556
from zdhzm2pgp@lemmy.ml to privacy@lemmy.ml on 10 Apr 05:05
https://lemmy.ml/post/45720556
(This is a question for people like me who don’t self host their email.)
threaded - newest
Iceland, maybe?
Any legal hoster will have to give up the data to local LEA, eventually. I would rather go for a hoster that has proven to use encryption and is legally fighting any order they receive.
I don’t think a provider should fight any order, especially if the chance of success is low or basically zero. It’s also very expensive. A provider that doesn’t have the data in the first place, is legally speaking better.
Not every order providers recieve is rightfull or legal or even fullfill the requirements of the law, or the legal forms are just not filled out correctly by the officer or department.
Fighting does not really mean, go to court, that would only really make sense for precedence, but more like “only do as much as you are required by law” and maybe “delay everything as much as you are allowed by law”.
Yes, that’s reasonable. That’s what e.g. mailbox.org does. And they publish periodic reports on how many requests they receive, how many they successfully reject, and how many they have to follow.
But an email provider will have to retain the data unlike VPN companies. Personal details, maybe but there are ways to never share them in the first place but the unencrypted emails are always at risk.
My own country. It’s very transparent here (DK)…
Makes me curious, I assume within the EU with GDPR it would be roughly equivalent.
What’s the difference between EU countries then and why?
Well, not all EU countries share laws. There’s the EU laws, and then there’s the countries own laws. We (here in Denmark) is often a bit more secure, than most other countries - and because my provider is in the country I live in, if there are any disputes, they can be settled here, without spending a million on lawyer fees… :-)
Which Danish laws go beyond GDPR?
Well, you should read up on the “Databeskyttelsesloven” for one… Or “data protection law”…
Thanks, skimmed through recordinglaw.com/…/denmark-data-privacy-laws/ but it’s quite difficult to do a “diff” between one and the other. From reading it I didn’t notice significantly better for my normal usage but I’m not a lawyer. It also makes me wonder, if you have done it, how do you know it’s not better than say another random EU country also national specific modifications, e.g. Slovenia? Is there any “benchmark” somewhere that identifies which national changes are better?
One thing is that I email and receive emails from almost no one that uses an encrypted service on their end so I have nearly zero expectations when it comes to email. Regardless, as long as it’s encrypted so they have been demonstrated in court to not being able to provide the content of my emails and you can pay with some crypto, then I consider it good enough. Other thing is that regardless of what country you live in, a service outside of the country you live in. Preferably even countries that have the least if not just about no significant information sharing treaties. Maybe hostile to the country I live in is best. I have no concerns about law enforcement in other countries. My concern is the authority that I live under practically every day of the year regardless of their behavior in the present
Other types of services I have higher expectations for privacy like cloud storage and VPNs
Sealand!
I’m not sure for what matters it makes a difference, namely en.wikipedia.org/wiki/Principality_of_Sealand#Leg…
Also AFAICT since en.wikipedia.org/wiki/HavenCo my understanding is that P2P and distributed technical solutions (torrent, Onion routing, I2P, bitcoin, etc) improved enough that it wasn’t really worth it.
Or space!
I feel like that’s the reason people have been talking about space data centers. Once it’s up there it’s kinda hard to get access to it.
In the case of email, security is more important than privacy. The country your provider is based in doesn’t matter.
Hypothetically if we were talking about something like a VPN, it would need to be a country which values privacy and which has a vaguely hostile attitude to America. I have no idea what country that would be.
.
E-Mail is only a privacy threat
Check out: mastodon.social/@delta@chaos.social
Probably some island that hasn’t been discovered yet or my own pirate ship, that has the best privacy protections because then I’m the government
My own tamper-proof server in a locked cage. There are no noncompliant jurisdictions.
trashbat.co.ck
Bunch of fuckzips
I wasn’t sure how many here would get a Nathan Barley reference
I still rewatch it every few years, love it!
It’s so good.
The guy is also in Benidorm and plays a very different character
Germany, since I’m a German citizen and know my local rights and laws better than anywhere else. Also easier to take legal action against the company if they they mess up.
Why “could”?
Like geni wish. Because my own country with it treats email the way it treats physical mail most stringently.