Ask HN: Best hosted alternative to Google Workspace for email?
So with Google starting to charge previously-free users, I've decided that I'd rather give my money to someone else. I'd like a provider who is likely to be around in a decade or two. Tips on moving many years of Google email to a new provider are appreciated as well!
265 comments
[ 60.2 ms ] story [ 2460 ms ] threadEDIT: This plan appears to only support "Office apps for the web", which are not good enough for serious use in my experience.
[1]: https://www.microsoft.com/en-us/microsoft-365/outlook/outloo...
Plus you can set up Azure AD and use the SSO tools!
https://hn.algolia.com/?dateRange=pastYear&page=0&prefix=tru...
Example from a week ago: https://news.ycombinator.com/item?id=30128198
Thank you! I used HN search before posting but didn't find anything helpful when searching for "google workspace", so I appreciate the links.
1) To be able to assign tags based on rules
2) To be able to view those tags in IMAP clients (Gmail exposes labels as IMAP folders)
3) To be able to Archive mail so they are no longer in the Inbox, but so the tag remains (in Gmail, 'Inbox' is just a tag that is removed when you Archive mail)
Zoho fails because:
1) Tags aren't anywhere near a first class citizen. You need to hover over an icon to see what tags are assigned to an email.
2) There's no way to search Archived mail (yes really) and it's not available over IMAP
They have subdomain addressing, which is kind of like plus addressing, but better (not all places let you sign up with plus addressing).
I've got my own domain, for example: mydomain.com. So my fastmail email address is depingus@mydomain.com. But with subdomain addressing, I can sign up for services with unique email addresses that look like:
social.hackernews@depingus.mydomain.com
I don't have to set up this alias ahead of time. Fastmail will automatically route incoming messages arriving to this email address to my "social" folder. If I start getting junk to that address I can easily blacklist it.
It wasn't easy switching out my email address EVERYWHERE. And there are places that won't even let me change it. But in the end, it was so worth it. I don't even miss Google Inbox anymore!
Eg: I want to register on HN - I would just register with hackernews@mydomain or hn.com.accounts@mydomain or whatever on the mailbox address side - it would be delivered to my main catchall mailbox anyway.
https://www.fastmail.help/hc/en-us/articles/360060591053-Plu...
Because I'm the only user on the domain I don't need the subdomain addressing.
https://fastmail.blog/productivity/fastmail-labels/
whateveryoulike@username.domain.tld
https://www.fastmail.help/hc/en-us/articles/360060591053-Plu...
They didn't have them when I first joined a few years ago but, when they added them, they did it the right way.
Coupled with the fact that you can use anything you want before the @, it makes for a very powerful way of organizing your mails.
[0]: https://admin.migadu.com/changelog
Moved 5 domains with wildcard support and 80k emails over and been going great (and only $20 a year for that).
I used imapsync (free / opensource) to move the emails from Google to Migadu.
https://www.microsoft.com/en-us/microsoft-365/outlook/outloo...
These days? Pretty easily!
Fastmail also has an email client, and a calendar. The calendar is integrated into its email service too. And the calendar integrates really well with iCal / CalDAV. I find fastmail syncs calendar entries between my apple devices more reliably than apple's own icloud.
The big hole in fastmail's offering is that they have no replacement for google docs & spreadsheets.
Microsoft Outlook + 365 (as others have suggested) also does pretty much everything gsuite does.
Since they already manage the domain for email, spinning up static sites at subdomains is really easy and really nice.
Edit: I’m pretty sure the sync options are part of the put command
I'm happy about this. Those are really complicated apps to support; they'd have to spend a ton of time and money and dedicate new teams to them (even if they "just" hosted OSS alternatives) which would raise the cost of my subscription and take away from their core competency (e-mail). And it may result in proprietary features, making it a lock-in device.
https://news.ycombinator.com/item?id=30128198
This monster thread about the original announcement is full of them as well:
https://news.ycombinator.com/item?id=29996432
Why? the less cumbersome route is to pay google.
There is no danger of Google canceling the core services of Google Workspace (email, calendar, Drive).
Google has never scanned G Suite/Workspace email for ad targeting and stopped doing it for email entirely in 2017; the ads in Gmail are targeted based on other information Google has (e.g. search history).
There are good reasons to not pay for Google's service, the above are not any of them.
Since Google has stated they're going to create an option for small, non-business G Suite legacy free customers, there's no rush for those people, who have been using it 10+ years, to get off it before they see what that option is.
Creation Date: 2013-10-14T22:37:59Z
In 2019, MXroute became an official legal entity in the state of Texas, MXroute LLC. MXroute remains a family business managed by Jarland and Christine Donnell.
Two issues I had:
1. 3 times my emails to gmail will be "silently delivered" in that they don't bounce but they don't land in the inbox. I had it happen to me (sending to my test gmail), me sending to a friend, and me sending to a business. It's a gmail problem, but this never happened when I was on fastmail.
2. Jarland is a solid admin, but he's "old school". Sometimes he'll blanket ban incoming mail, and you might miss messages. For example, I was trying to sign up for mailjet and I wasn't getting the sign up email. When I opened a ticket, it was because MXroute was seeing "a bunch of spam from that provider" so it was blocked. I have no clue if I missed any emails from sellers/senders that use the service during that time...
Looks like you were not the only one.
(Sure, if you wanna send it to spam, I'm open to that, but it was dropped on the floor...)
Enable "Cloud Identity Free" then just go to his user in the admin panel and remove the users "Google Workspace" license.
I'm using iCloud+ from Apple. It's cheap at $1/mo for 50GB of space and lets me have my custom domains. $3/mo will get you family sharing and 200GB of space (if you want multiple accounts - I just have one account with multiple domains/email addresses). Apple's email hosting is 22 years old (pre-dating Gmail by 4 years) and seems like it won't be going anywhere anytime soon. They've recently expanded their email offerings with things like "Sign In with Apple" and "Hide my Email."
Zoho Mail will give you free hosting without IMAP or $1 for 5GB, $1.25 for 10GB, $3 for 30GB, $4 for 50GB, $6 for 100GB (billed annually).
Microsoft 365 will cost $5.83/mo for 1 person or $8.33 for a family of 6. Each account gets 1TB of storage (6TB for the family in total) and you get all the Microsoft Office apps. One issue is that the domain needs to be with Go Daddy which ups the price a little given their premium pricing on domains which is around an extra dollar per month.
FastMail is $5/mo for 30GB, $9 for 100GB.
There's no magic email provider that no one ever complains about - including Google where we've heard horror stories of getting locked out with no one to even contact. It also seems like no one wants to be hosting your mail for free with IMAP support anymore (and almost no one wants to host your domain email for free generally).
For me, migrating to iCloud+ was cheap and easy. I'm already on a Mac and iPhone. I set up some simple rules to filter my mail on my Mac and I'm enjoying the instant response of a native app. At $1/mo, there's no lock-in to annual billing and it basically costs nothing.
Microsoft 365 seems like a good deal if you're looking for a lot of storage and Microsoft Office apps. 1TB for $5.83/mo is basically the same price per GB as Dropbox, but you're also getting mail and the Office apps.
Absolute dealbreaker.
There's no real reason why I can't just point my MX at them, do the additional configuration[*] and have them host my mail.
Any explaination would be pure (and utter) BS.
[*] being setting spf, dkim records and stuff
The personal/home offering requires godaddy for the domain.
Q: I already own a domain that's registered with a provider other than GoDaddy. Can I set up a personalized email address in Outlook.com?
A: At the moment, we only support connecting domains managed by GoDaddy with Outlook.com.
Maybe that only applies to "Microsoft 365 Family or Microsoft 365 Personal" and not their business offering? They have a basic business offering for $5/mo, but it doesn't include the Office apps (just the online versions).
EDIT: It looks like non-GoDaddy is for business/enterprise plans: https://docs.microsoft.com/en-us/microsoft-365/admin/setup/a...
The reply to that about the workarounds disabling spf is wrong, at least for the adjacent reddit link. It includes relevant spf records and they appear to work fine.
I’ve been hosting my custom domain on the personal office 365 / outlook.com using these workarounds for a couple of weeks now and so far it has been working just fine.
Ideally dmarc and dkim would be supported, but it’s worth noting that it appear that neither of those are supported by the personal office 365 / outlook.com plan even with GoDaddy.
Unlike gmail they appear to implement the full imap protocol
That was way before the Catalina Apple Mail data loss bugs. https://mjtsai.com/blog/2019/10/11/mail-data-loss-in-macos-1...
Any sysadmin will tell you Apple Mail has had occasional weird dogshit bugs for a decade.
Use Thunderbird, it's more likely to be robust and not corrupt your emails, then feel free to switch back to Apple Mail once you've moved everything.
It’s been happening since 2016 (first time I noticed) and last reporter to them in January 2021. Then I gave up. It still happens.
Anyway that’s just one immortal Mail.app bug.
I am just in the process of finding another mail client (preferably native, paid, and open source that doesn’t read my mails)
It will also read EML, MSG, PST, and MBOX formats, and connect to Outlook and Thunderbird.
https://www.mailstore.com/en/products/mailstore-home/
If you have a linux box around, the "imapsync" tool works well.
MBOX is a very simple format - It's a list of e-mails, separated by newlines. That's it, all there is to it. All metadata is in the form of e-mail headers. Those e-mail headers can be added by a variety of systems - Your MTA, the Sender's MTA, and MTA's in between (such as anti-spam appliances).
Gmail stores metadata about mail messages, and one of those metadata items is the labels that are applied to it. These are used to make searching easier, and are shown in the UI so you can select them and filter by them. Gmail Exports (via Takeout) add a "X-Gmail-Labels" Header that represents this metadata[1].
Gmail's IMAP interface shows you labels. IMAP as a protocol allows you to descend into folders, and to ask about the contents of folders. Gmail doesn't have folders, but it creates folder-like-views of your e-mail by selecting and showing messages that have those labels. It's a convenient interface, but it's a shim layer on top of Gmail, not in any way representative of how your email is stored.
The parent message is uncharitable and technically incorrect. It's not wrong that the gmail export experience sucks, but it's not right enough in the details to be a valuable contribution to the discussion in my opinion. Disclaimer: I maintained the Gmail Import API at one point in my life, and care deeply about portability.
[1] Interestingly, the header is different if you're accessing over IMAP vs from a Takeout export: https://developers.google.com/gmail/imap/imap-extensions#acc...
It should also be noted that placing labels into the message headers is a solution that can lead to information leaks, and one should be careful with it
The headers are kept (at least in some email apps) when you reply to those emails so the receiver will know your label for that message. So if you label email from your boss as "from idiot" he will know (and there are obviously more serious examples).
Regarding the Gmail labels in IMAP, I'm not sure why you talk about headers. The page you linked to is about the IMAP extension commands, AFAIK the labels do not end up in the headers in that case.
iCloud / OneDrive / Google Drive / DropBox are not a backup solution despite the vendors promoting it.
They are there only for convenience.
I have experienced file loss on OneDrive. I am now using iCloud and have had no file loss whatsoever. I regularly diff my offline backup with iCloud Drive contents mirrored to my mac.
Also to note: About 50% of the stories you hear are users being morons. My sister lost some files. She deleted them after fat fingering something and blamed the cloud vendor (Google). It happens.
Make sure you back up stuff separately and fully offline. You’re just as fucked if someone rips off your account.
Some of these services (e.g. Dropbox) have rollback which would have helped in this situation, and most have a "Rubbish Bin" you can undelete from. I often click on the wrong thing because the web UI is lagging and I delete something by mistake.
I agree these services right now are all for convenience. There are horror stories from all of them, except for rsync (who are active on here) - I've never heard of any horror stories from their cloud service, but obviously if your payment stops for whatever reason, then all your stuff is gone with any of these.
If not, you can also subscribe via Google Play or the App Store and keep your payment info safe that way. (I didn't sign in to check if they support PayPal or the like)
Unless you deploy another tool or service to keep checking whether everything has been a file loss or inconsistency inside iCloud. Yes, it’s that opaque!
On the contrary on Dropbox I know exactly what is going on and there are features to revert a change.
With Gmail, there is basically no human support these days.
I just had a buddy come to me after someone tried to brute force his sbcglobal email and locked him out; AT&T have told him it might take someone up to 2 months to get to his support request.
+1 for Fastmail. I've used them for almost 20 years and their support has been great.
https://www.reddit.com/r/Office365/comments/ft15pk/use_perso...
Looking at it they don’t allow for “groups” or aliases either.
It feels years behind.
I’m using it for my domain fine but that has only two users on it.
I want to make the switch, but I can’t yet. The lack of email lists “groups” is just holding me back. I have about 20 of them. I also have about 15 aliases…
It feels like it’s the beginning of Email…
This is what I ended up switching to and it's been working fine so far. I learned from this debacle that tight-coupling email to any other service is a liability, so email-only is actually a feature for me. No GoDaddy requirement either.
https://www.microsoft.com/en-ww/microsoft-365/business/micro...
I have tried the iCloud+.
It’s unstable, incomplete. Barely not shitty.
Deliberately sparsely and vaguely documented. Their support employees don’t know the features around custom domain, HideMyEmail etc and refuse to accept anything about it on email and then being typical Apple they simply say no to saying anything on email - hell, there is no email you can contact them.
They tell you “yes, this is the behaviour” on phone. They tell you “there is not documentation for it yet”, they refuse to say this on email. There is no email address you can write to. “No there is no other escalation or contact”. Trust me it’s a nightmare.
You hate Gmail not having human support? You’ll start appreciating Gmail’s no support when you will actually be talking to Apple’s support human being bots who will make you feel like hitting your head against the wall at least 7 times per 10 minutes while maintaining complete corporate composure and plastic professionalism.
If you want to use HideMyEmail it’ll be not on your domain. It’ll be locked to the subdomain (@privaterelay.appleid.com) of a company that’s the biggest walled garden this planet has ever seen and so powerful that it can just delete your account and you can do jackshit about it - yes, they have done it. The typical “find a connected employee at Google” also doesn’t work.
There’s not even catch-all. Max three emails.
Do yourself a favour and a get a real and dedicated mail provider like Mailbox, Fastmail etc because even after being few years older than Gmail iCloud mail is much much much worse.
Besides unless you’re also sunk in the walled garden up until your ears or maybe forehead you won’t be able to use 99.12% of iCloud+ anyway (Or maybe nothing if you stop using fruit company devices. I am not even sure and couldn’t figure out from their documentation and support)
Edit: Wow! Fruit company fans already at their downvoting game! Amazing! Ffs, if possible try to pull the fan part of that brain out of the place where sun never shines? I am also a “user” of Apple device(s), just not a “fan”. But it explains how yesterday there was a sub thread (on payment cut thread) how Apple fans give a pass to Apple for everything shitty and evil like feckless apologist drones.
Their documentation put double-quotes around the SPF records, and when I added them they didn't work -- had to remove the quotes completely.
And yeah, 3 email address limit and a weak icloud.com interface (compared to gmail) is also annoying.
But honestly I'll probably use it for a while, their IMAP support is good so I could always transfer emails out and point the domain records somewhere else. 99 cents a month is a bargain, the only other provider in that price range is Zoho Mail (which I also like and probably would have used if my contacts/calendar wasn't already on iCloud).
> @privaterelay.appleid.com
The @privaterelay.appleid.com is for email addresses that were created by using "Sign in with Apple", you don't have to pay for iCloud+ for that. If you create disposable emails with iCloud+ they come in the form: Coconut-Apple.0b@icloud.com (the words, numbers, and separators are random)
Their IMAP is very slow (in true iCloud spirit). People will find it difficult to migrate larger mailboxes. I don't get why they can't just fetch my mail directly from Google.
3 email addresses without at least a catch-all option is not enough.
Their spam filter is rubbish. Even emails sent between members of the same family sharing group go to spam in spite of never leaving Apple's own infrastructure.
Many of my messages show up with an incorrect date, because they were moved between other email providers at some point, adding a more recent "Received" header. I don't blame Apple for this but it's definitely inconvenient having to preprocess the mbox file before uploading.
Apple Mail is highly unreliable and buggy. It deleted all my emails before. There doesn't appear to be any way to cancel a copy/move operation, which is particularly annoying when migrating a lot of email. But fine, there are other email clients (none that I like though).
Unfortunately, the rest of iCloud is really second rate as well. iCloud Drive has no versioning or ransomware protection whatsoever. You can't upload or download a folder from iCloud drive via the web interface. Sharing is crippled, insecure or impossible unless everyone involved uses Apple devices for absolutely everything.
So this is just not an adequate solution for any sort of professional use.
I'm trying Microsoft 365 right now. My experience started with an outage of the main admin site lasting for hours. But it can do a lot of things and it's fast. The downside is that you have to use their unbelievably sprawling, inconsistent, redundant set of admin interfaces that only make sense if you have been a Windows sysadmin since the (previous) .com bubble.
Their FAQ also states that it is only available for non-Russian residents that are businesses. Urgh.
There was a quite lengthy discussion about this in their forum but they deleted it since. They refused to fix it. Archive.org still has it. Content is in German (sorry):
https://web.archive.org/web/20210123192856/https://userforum...
Surely they'll only allow that if they pass the auth and the domain belongs to your account?
Fixing this would only affect users who send emails "from" other users email addresses, basically users who commit fraud.
I also don’t fully understand the reasoning. Having an open SMTP server that doesn’t restrict senders is one thing, but attaching DKIM without further checks is another.
What they said in the forum doesn't make much sense. Yes, anyone in the wold can send emails with any address as "from". The big difference is that those emails won't pass SPF and DMARC checks.
If I wanted to use them, I would need to configure SPF and DMARC for my domain so that their mail servers pass those checks. At this point I would expect their mail servers only to allow sending "from" my domain when my account is used.
Note that just about any major mail provider does this check (e.g. Google). It is industry standard. It is crazy that they even refuse to acknowledge this. I'm working in this field and this is basic knowledge. I just don't get how they can do this professionally and not understand what the problem is. The only explanation I have is that for some reason it would be hard for them to fix and so they try to ignore it / make it disappear by deleting the forum thread.
Also they use the same DMARC key for all customers, which is weird. Usually each customer gets it's own DMARC key.
It seems this issue was acknowledged 2 years ago: https://userforum-en.mailbox.org/topic/anti-spoofing-for-cus...
Edit: re the shared keys you mentioned I agree. If they had per-user DKIM keys that were only usable after successful SMTP authentication (e.g. by encrypting them with credentials) that would solve the DKIM part of the issue AND even further improve the situation.
Does mailbox.org even include the "From:" address in the DKIM signature?
According to the spec, the “From:” field must be included in every DKIM signature.
https://datatracker.ietf.org/doc/html/rfc6376#section-5.4
If an email is sent with a From of @bob.com and DKIM signed using the private key for bob.com…it’s from bob.com.
Like you said: SPF and DMARC only authenticate the server. It's up to the server to authenticate the user.
Scenario: imagine your bank uses Mailbox.org to send emails. How would you verify that an email is legit? Any Mailbox user can send emails through Mailbox with your bank as "from" and all of these emails pass SPF and DKIM checks. Your mail server has no way to distinct a legit email from a fake one. This is why it's important that the server does this check (check that sender account and "from" match / are a valid combination).
The actual complaint here is that mailbox.org is not policing the "From:" address and thus are providing such an ability to people that have not bothered to spin up a mail server on a domain they control.
Yeah, banks should sign their emails. I think that even Facebook does this if you give them a public key.
E: by valid I meant valid and aligned (according to DMARC), sorry
I now think that the DMARC stuff is a red herring and would actually help make the current mailbox.org behaviour not all that problematic (they specify "reject" in their DMARC policy). The actual point of dispute is the lack of enforcement of the "From:" address domain.
Mailbox.org’s servers have access to 4 private keys as far as I know. These (I mean the matching public keys) are stated in mailbox.org’s DNS records. If you send from an @mailbox.org address you trust mailbox.org to do checking on the Header-From when signing it, as you have no control over which keys you state in DNS. This is the same situation as for any mail provider with a shared domain.
What’s even worse, when using mailbox.org with a custom domain they will have you state the exact same 4 keys in your domain’s DNS records for DKIM to work. There is no way to upload custom keys. So even someone with a custom domain has to trust mailbox.org to not sign strangers’ e-mails.
Added: Wait, how would that even work? You need to generate your own DKIM key.
If anybody realizes you’re using that service they can immediately impersonate you.
Please name even a single major mail provider that allows to send emails with arbitrary "from" headers.
https://datatracker.ietf.org/doc/html/rfc7208 https://datatracker.ietf.org/doc/html/rfc7489
I think the reason to switch is that Google decided to use the same pricing that they want to get out of enterprises for individuals/families. Sure, $6/user is nothing to a company that is paying that worker $5,000+ per month, but it can be annoying for a family (even if it's still relatively affordable). But then you have to think about whether you want to pay $12/user to upgrade their storage making it $72/mo for a family of 6. And you still don't get the Microsoft Office apps. They aren't strictly necessary in a lot of situations, but they're still pretty commonly used.
It just seems like Google isn't offering great value for individuals and other companies offer something better. In a certain way, it feels like Google is charging $6/user/mo just for the custom domain. With Microsoft 365, it at least feels like you're getting something above a standard account with the Microsoft Office apps and 1TB of storage.
And if you're like me who has already been paying $12/user/m ( which is higher than it used to be! ) just for the unlimited storage aspect... Congrats! That's going away in a few months and the only equivalent is upgrading to an actual enterprise plan, which I _believe_ starts at $20/user/month
I just want to store my raws without spending an arm and a leg, god dammit
I've just moved, and it's great. Import is fantastic (I migrated 14GB of email) and I've used Dmarcian to monitor and confirm everything is perfect on the SPF, DKIM front. Spam initially got through, but once trained it's been flawless I've personally abandoned labels for folders as I used barely 10 labels in Gmail and seldom added more than one, but they do support labels if you want that. It's great for wildcard email and aliases.
I've moved the calendar over too via Google takeout for the individual .ics files. On Android I use DAVx5 to keep using the Google calendar app (point it at your fastmail account and it will display in Google calendar).
For Drive I've moved to syncthing and am using a Synology NAS as my always online master copy, but each of my computers has a copy. I also installed libre office on my laptop.
And I'm keeping a Gmail account just for Android backup and app purchases, etc.
That's the basics... Beyond that, everything is disabled that was shipped with it except Windows and Apple file sharing locally.
Then I've installed the SynoCommunity version of SyncThing.
I have multiple users in the house and each person has a folder on the NAS which is their home network share and only accessible to them (and me as server admin)... things like Time Machine will have this as their backup drive and they can also dump larger files there. Within each person's network share is a directory that is mapped to SyncThing. On each of their laptops their folder is also on a local SyncThing. This means there's a shared folder on their laptop and network share which SyncThing will keep in Sync when off of the LAN, and when on the LAN they can use any computer to access the folder via network. But mostly, locally on their laptop they just work on local files and don't have to think about how it all keeps in sync.
Finally I make a cold backup once a month to an 18TB HDD USB drive which I store outside of the house except for this once per month task. This is backup via rsync.
That's it. Fairly simple. I only use a NAS for file storage and SyncThing, nothing else.
[0]https://www.fastmail.help/hc/en-us/articles/4406536368911-Ma...
All of this to say it’s not worth hosting your email because your smtp server doesn’t have any reputation. I had a mail server that never sent spam or junk mail, was online for over 8 years on the same IP and I still had emails blocked or black holed. Not to mention all of your mail will just go to spam the first few times. Very unprofessional and not worth it in my mind.
It's functional and works ok, but is not as slick as Gmail (both web and app)
I've had two actual delivery issues over the last 5 years, so overall not bad.