* They say the combination of AES-128 and 2k RSA keys is secure
* The private key is stored on their servers (password needs to be set, but if security hinges on the private key password...)
* The website contains FUD (e.g. the FAQ [1])
* They have been sending UBE with loads of FUD to promote their services
[1] https://tutanota.de/#!faq (the language switch is all the way down at the bottom)
http://www.thoughtcrime.org/blog/ssl-and-the-future-of-authe...
http://ianix.com/pub/dnssec-outages.html
Disclaimer: I work on DNSChain, a blockchain-based alternative to DNSSEC & X.509. Note that DNSChain does support blockchain-authenticated DANE TLSA records. In the future, DNSSEC's SIG record may be used to provide MITM-proof verification of the validity of that TLSA record for DNS-based apps.
I know 1k RSA isn't secure, but I thought 2k was.
from Schneier's post: https://www.schneier.com/blog/archives/2013/09/the_nsas_cryp...
There is some speculation that the NSA could potentially have quantum computers in which case RSA(and basically everything) is just fucked. Hopefully that's not the case (but hey, what your shadow budget is more than the rest of the world spends on crytopgrahy research combined then who knows, right?)