openpgp.org icon indicating copy to clipboard operation
openpgp.org copied to clipboard

add tutamail

Open rafy opened this issue 3 years ago • 2 comments

i want like tutamail to be added to the list

rafy avatar Aug 02 '21 16:08 rafy

I assume Tutamail refers to Tutanota.

one of our domains (tutanota.com, tutanota.de, tutamail.com, tuta.io, keemail.me

­— https://tutanota.com/faq/

Tutanota doesn't use PGP for encryption, it implements a custom protocol which is not interoperable with other clients/services.

Current encryption standards like PGP and S/MIME have several issues that we plan to address with Tutanota. These standards do not support forward secrecy and are not resistant to attacks from quantum computers

— https://tutanota.com/faq/#pgp

Tutanota does not use an implementation of PGP because PGP lacks important requirements that we plan to achieve with Tutanota

— https://tutanota.com/blog/posts/innovative-encryption#why-tutanota-does-not-rely-on-pgp

For better or for worse, they basically sacrificed interoperability and user choice/control (no official support for third-party clients), in favor of taking privacy a step further. i.e. Encrypted subject lines on emails.

Tutanota should not be listed in this repository.

SethFalco avatar Jul 01 '22 07:07 SethFalco

If the goal is encrypted subject lines, there are standards-based ways to achieve that interoperably which work fine with OpenPGP. I agree that if Tutanota doesn't use OpenPGP, it should not be included in a list of OpenPGP implementations.

dkg avatar Mar 07 '24 21:03 dkg