in reply to Aliyan

mastodon - Link to source

Tuta

@Aliyan With the client code being open source, everybody can build the client themselves, run it locally, verify that the open source code is being used. Even if we published the server code open source, this would not be the case: No one would be able to verify that the open source server code is actually running on our server. Lastly, all the encryption takes place locally on your device (end-to-end encryption) so our servers don't see your encrypted emails and can't read your data
@Aliyan
in reply to Tuta

mastodon - Link to source

Squirrel

@Aliyan “Lastly, all the encryption takes place locally on your device (end-to-end encryption) so our servers don't see your encrypted emails and can't read your data”

Approximately 0% of all mail an Tuta is E2E-encrypted. Mail that comes from other mail server (approximately 100% of all mail) comes in unencrypted.

Tuta also handles a lot of metadata that is only partially obfuscated by encryption, and does black box E2E key exchanges.

@Aliyan
⇧