Privacy

10848 readers

77 users here now

A community for Lemmy users interested in privacy

Rules:

Be civil
No spam posting
Keep posts on-topic
No trolling

founded 3 years ago

MODERATORS

iopq@lemmy.world

Anyone use Aster Mail before? (astermail.org)

submitted 1 week ago by lemmyng@lemmy.world to c/privacy@lemmy.world

11 comments fedilink hide all child comments

"End-to-end encrypted email, hosted in Germany, with 10 GB free forever and no ads, scanning, or AI ever."

Is this another provider that seemingly promises a good private email alternative before enshittifying down the line a la Proton, or is this legit like Mailbox or Tuta?

you are viewing a single comment's thread
view the rest of the comments

[–] XLE@piefed.social 18 points 1 week ago* (last edited 1 week ago) (2 children)

I've never heard of them before, but they look like they're trying to beat Proton at their own game (including by providing a bring-your-own-domain option for free in order to seduce current Proton customers).

On the other hand, people have claimed Aster is "vibe coded to hell" after another random competitor pointed out a bunch of issues that seem to have been caught from a Claude Code audit, so maybe this isn't the most serious product when the people behind it don't really seem to know what they're doing (like creating and then apparently immediately deleting keys?!)

Edit: from the same thread, their CMO allegedly sells Roblox exploits. This isn't the kind of background that causes me to put faith in a company, that's for sure.

[–] lemmyng@lemmy.world 8 points 1 week ago

sigh Add it to the pile.

[–] ryannathans@aussie.zone 4 points 1 week ago (1 children)

FULL DISCLOSURE: I am one of the founders of Secria Mail.

no responsible disclosure of security vulnerabilities

Hmmmmmmmmmmmmm

[–] XLE@piefed.social 5 points 1 week ago (1 children)

I was ready to assume the entire post was BS too.

Until I saw the AsterMail team reply and verify they were correct.

[–] ryannathans@aussie.zone 5 points 1 week ago (1 children)

I'm not arguing it's bullshit, I'm saying there's a very specific way vulnerabilities are supposed to be disclosed to protect the public and someone who would be VERY familiar with the practice failed to do so

[–] XLE@piefed.social 1 points 6 days ago

Ah, understood. Thanks for clarifying (I was worried I hadn't been specific enough myself, since the thread is long)