this post was submitted on 26 Jan 2024
-8 points (36.7% liked)

Privacy

29873 readers
506 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
-8
Mullvad uses Gmail (simplifiedprivacy.com)
submitted 5 months ago* (last edited 5 months ago) by DeadNinja@lemmy.world to c/privacy@lemmy.ml
top 11 comments
sorted by: hot top controversial new old
[–] anamethatisnt@lemmy.world 21 points 5 months ago* (last edited 5 months ago) (1 children)
  1. If privacy is of utmost concern, we recommend that you refrain from communicating any personal data to us since plain-text email is not a safe media for communication. If necessary, use PGP-encrypted email.
  2. ...
  3. ...
  4. We do use a third party to operate our email service, so we remind you to carefully read #1 again.

from: https://mullvad.net/en/help/no-logging-data-policy#email

[–] LWD@lemm.ee 2 points 5 months ago (1 children)

They oughta say who though.

[–] anamethatisnt@lemmy.world 2 points 5 months ago

I can agree on that, but their dns already do for anyone who is interested to find out.

[–] SnotFlickerman@lemmy.blahaj.zone 16 points 5 months ago* (last edited 5 months ago)

A long screed but has this jackhole who writes so unprofessionally even reached out to Mullvad for comment or explanation? Because that's usually what respectable journalistic outfits do.

They don't post some screenshots, make inferences without knowing all of Mullvad's backend, and say "what we are saying is definitely true and there's no possible way we could technically be wrong."

I can think of several ways they could be wrong, it would have been helpful to have any statement from Mullvad, because they might have a technical reason for this (up to and including making sure their emails aren't disappeared as spam, because running your own email server sucks.).

Anyway, pretty unprofessional and makes me pretty skeptical of the claims until more solid evidence than a screenshot surface.

For example, who is to say that Mullvad hasn't set up their own client side encryption keys? This is an option Google offers for use with business accounts. This effectively means Google doesn't have your keys nor can read your emails.

https://support.google.com/a/answer/10741897?hl=en

It took me five seconds of searching to find this. Did the guy who wrote this article even try?

[–] xela@lemmy.ml 7 points 5 months ago (1 children)

...because why would you go to all the trouble to pay Mullvad (presumably to keep your sensitive information away from big tech) to then give it to google in the form of an e-mail should you reach out to Mullvad for support? Google would then suck up any and all data that comes via their gmail service.

[–] moreeni@lemm.ee 0 points 5 months ago (1 children)

What? I'm really struggling to see why this comment is upvoted and the article is downvoted. The article doesn't contradict anything in this comment

[–] LWD@lemm.ee 3 points 5 months ago

It's because of the difference in credentials. One is a website positing as having both privacy and cryptocurrency investment advice services, and the other is a random Lemur

This site has a long history on Kbin and Lemmy of spamming poorly written, poorly researched articles. It is a trash site written by a 14-year-old who knows nothing about anything.

[–] LWD@lemm.ee 4 points 5 months ago

I've trash talked this website before in my head, but maybe I was approaching it as a professional organization instead of more of a blog run by a small group of people.

They aren’t just doing ads dude, it’s a for-profit propaganda machine.

But seriously, Mullvad would do well to switch out their email provider to something that's not Google. Even though email is inherently unsafe, email through Google is pretty much is unsafe as it can get.

[–] leraje@lemmy.blahaj.zone 2 points 5 months ago

I've been using them for nearly 3 years now and never used (or even knew they offered) email support.

Not ideal they use GMail of course but they could be using private keys (as most business users do I believe) which means Google couldn't see a thing anyway.

[–] Aradia@lemmy.ml 1 points 5 months ago

“privacy is a right”

Mind blow. 🤯