In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We've tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the "official" Privacy Guides community on Lemmy, which can be verified here. Other "Privacy Guides" communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
Additional Resources:
I've been trying to move away from email as a document server.
Anything that's important / I might want to reference later gets exported to a secure paperless-ngx instance where it's neatly categorized and easily searched. I then delete it from my inbox.
Came here to ask about paperless and the myriad of versions, even though it's off topic.
Paperless-ngx installed via docker-compose is super easy. I have it on a luks-encrypted vm only accessible via tailscale.
Thank-you. I'm really interested in finding a way to make searching my paper much easier.
If you're in Linux, you can use eCryptfs to setup a private encrypted directory, move the ~/.thunderbird directory into it and just leave a symlink to it in your unencrypted home directory. Then you can store your emails in plain text in the encrypted private directory.
It's not even complicated to set up: most Linux distributions are setup so that the private directory is automounted upon login: when you're not logged in, your data at rest is encrypted. It only becomes readable when you're logged in.
Both my Thunderbird and Firefox directories are stored in my private directory.
This does not answer the question. OP wants to Thunderbird to decrypt PGP mails. Yes, it makes sense to use an encrypting fs, but we are still missing this thunderbird feature.
Locally, an attacker still needs to know your password. A strong password can make it too expensive or impractical to brute force.
Do you have to put in your password on every session in protonmail? If not, then that means that either the key is unencrypted and is stored somewhere else as plaintext or the password is stored somewhere also as plaintext, which would defeat the purpose.
Honestly, I can't think of a good reason. This is just how email has always worked. What Thunderbird stores locally is identical to message on the server. It's not decrypted because no conversion happens when syncing mail.
I agree, it would make sense to keep plaintext emails locally or on a trusted server for practical reasons.
I think Tutanota (or just Tuta now?) does this, since search works correctly.
I think not using PGP helps Tuta a lot with this, since PGP is really outdated and does not play well with modern features.
This may be a long shot, but it's what I do, so it might be an option: Set up a crypto gateway like CipherMail which will automatically decrypt inbound email and sign/encrypt outbound. The result is that your Thunderbird will never get to see an encrypted email, decryption is handled transparently before it hit's your inbox. Obviously, if you don't trust your email provider, this is not an option.
This isn't simple and hence not for everyone, also comes with dependencies on your email provider, but it works flawless for me ever since I set it up. I run my own email server, hence adding in CipherMail wasn't a big deal.