Best secure email service?

[plonkeyt]

Best secure email service?

I think mailbox.org is the better choice because they actually have a DMARC policy. With posteo, anyone can spoof posteo domain and the remote mail server has no way of checking that. It’s a nice option to have, which is not possible with Posteo. They claim the reason is “for privacy”: Can I use Posteo with my own domains? No. We are an email provider with a particular, privacy-oriented model – and this is not compatible with incorporating own domains. One of our emphases is data economy…

Can you elaborate on how anyone can spoof a posteo domain? Another person suggests this is incorrect.

Risks of using Posteo (email provider without DMARC policy)

No this is not really correct. DMARC is good to have and Posteo will probably add it soon, but even without a DMARC policy almost all email servers still check SPF and/or DKIM signatures, so nobody is able to just spoof posteo email addresses. Adding a DMARC policy just makes it more explicit to other email servers that SPF and DKIM should be checked. It does not apply in the case of Posteo domains, but if somebody would be able to spoof an email, then a reply would still go to you and not to t…

Furthermore, it seems anyone can spoof mailbox.org custom domains email addresses.