Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by hackuser | Hacker News Reader

Full thread

hackuser·

Would one of the apparently many happy FM subscribers share details of what kind of security they provide?

(It bears repeating: No email can be very secure.)

View on HN

https://www.fastmail.com/help/ourservice/security.html

- happy FM subscriber for 3 years

Also I didn't see it directly mentioned on that page, they're not subject to US law enforcement requests (unless they go through a Mutual Assistance treaty request) and there's nothing like an NSL in Australia: https://blog.fastmail.com/2013/10/07/fastmails-servers-are-i...

But see: https://en.wikipedia.org/wiki/Five_Eyes

True, but probably still better than the US or UK: https://protonmail.com/blog/investigatory-powers-bill-email-...

Their EU servers are in the Netherlands. Although I guess it's hard to know if any EU traffic goes to the US servers.

Australia does have similar laws but it seems they don't apply in this case: https://blog.fastmail.com/2015/04/09/fastmail-is-not-require...

They support multiple kinds of 2FA tokens (Yubikey, U2F, Google Authenticator, and others). I was even able to disable the phone-based 2FA, which means my account can't be hijacked by someone who's stolen my mobile number [1]. That also means I could get locked out if I lose all my tokens, but I'm willing to take the risk since I have my own domain, which could be easily ported to a new account.

[1] https://www.forbes.com/sites/laurashin/2016/12/20/hackers-ha...

This (although good to hear - I would also be interested in a purely U2F 2FA setup for email) seems to only be concerned with security for the user's perspective. What about the security of the service itself from a more "backed" / overall perspective (those factors beyond the user's control)? As much as I dislike Gmail as a big brother it's hard to beat Google's security team.

Full disk encryption on their servers and they ignore non-Australian court orders

Reply on news.ycombinator.com