Ask HN: How to move away from Gmail
I'm currently attempting to move away from Gmail to a email provider that respects my privacy.
Can anyone on HN suggest a online service that protects my privacy, has IMAP support and is preferably free?
In addition is it possible to delete most of the data Google currently ties to my profile?
149 comments
[ 5.0 ms ] story [ 215 ms ] threadI'm currently trying to do this as well and the only viable solution sounds self-hosted email. I tried a bit with hushmail and Tor (also look at hushmail's Diceware for password encryption) but it has a tight limit of 25MB for free accounts.
Good luck.
Here's one that costs some money: http://fastmail.fm/
Yearly plans give you the extras you'd want and are around $35/yr
I've been using them for a few months now, definitely worth the price. Really quick and easy to add new virtual domains, and the spam filter is decent enough for my inbox. Highly recommended.
http://lavabit.com/
Zohomail is an interesting alternative. They say that they do not sell ads because they are a profitable subscription-based service. Email is free for personal use, has good IMAP support and a decent webmail interface. You can also use your own domain for free. The only problem I've found with them is that the email filtering is limited to a few common fields (e.g. no specific headers).
http://www.zoho.com/mail/
Lavabit seems quite interesting.
Anyone going to write a Gmail clone for installation on your own servers finally? I would pay quite a bit for that.
When you view an email, only text is shown. You can "View as HTML", but images are blocked. http://i.eho.st/pp2fukzy.png
Personally, this renders the web interface useless to me, so I view my email through Outlook.
http://squirrelmail.org/
Makes sense, it's sort of the goto open source webmail app.
Already presented my disclaimer: I have been working with Gmail since it's inception. Before that I used all kinds of different clients; all not very nice. The best I used was mutt by far. But that pre-gmail ;) I'm talking about the client, not about Google as cloud mail storage provider, although I really don't think they are evil yet as people seem to think.
I digress.
So this is more a shootout than a face value comparison, although most points, I believe, would annoy me as well without the gmail comparison.
Biggest: speed. Basically that's my biggest issue. ZOHO is slow. Very slow. This is not only the mail app, this is everything (the project management app makes me bang my head against the wall every week I have to enter hours as it takes... yep, hours...). But for the mail app, something I use intensively, this is really quite unworkable. My colleagues at the client all use Outlook with Zoho as they cannot work with the mail client as it is too slow to really work with.
With gmail you click on a message and as by magic, instantly it opens the entire thread. For the current page even when your network is gone. With Zoho you see 'loading' then you wait. And wait. And then it appears. Next mail. Loading... The agony. It's like it was the year 2000 and we just had Ajax.
No internet detection; when internet is down even for a little bit, Zoho mail becomes unusable. It takes forever to notice internet is down and it will be showing 'loading' forever and nothing works even if you are back again. Refresh fixes it, but it seems brittle. Sometimes the CSS breaks, sometimes it just give random error messages when you click on anything. Even though the internet was back for a while already.
This is probably a matter of taste, but screen real estate; when i'm reading a message i'm not interested in the rest of my messages. I want to use most of my available screen for reading that message (like gmail...).
Spam: I get tons of spam; I have ancient email addresses and they attract 100s of 1000s of spam mails per month; in gmail I notice NOTHING of this, really absolutely nothing. In ZOHO the spam filter is almost not noticeable for me, I keep clicking spam until my wrists are locked up.
And then the little things, the ergonomics; it just feels clunky. Not as bad as the project management app (I am no interface designer, but come on :(, but it just feels old and heavy. If Google taught anything for mail client designers; not everything has to look/work like Outlook.
This all makes me say ZOHO web mail is not ready for heavy mail users even though a lot people use it for that; a lot people also use Lotus Notes, that doesn't prove much. I will pay more attention and mail you with my findings because now I only see the big points clearly, but the whole experience is actually just 'not good'.
You did a marvelous job of building this company; my compliments. You have a lot of good products and you managed to build this impressive array of products at an amazing rate. But that has it side effects; polishedness is one of them. I know a lot of people who work with Zoho products every day and for some of them they still cannot find how to do some things ( I won't name my nemesis again here ). Would it hurt to add employee 1401 who is a $400k/year UX guru to overhaul everything? I think it would make all the difference.
Thanks for replying here!
What does this mean?
I think any way you look at it, there is a basic compromise you make with Gmail: either Google holding all of your info, or someone being able to hack into your account due to security vulnerabilities. Also, not to mention the tools and email filters Google provides.
[1]: http://www.google.com/intl/en/policies/privacy/
"We use the information we collect from all of our services to provide, maintain, protect and improve them, to develop new ones, and to protect Google and our users".
Develop new services sounds pretty open ended to me.
"When you upload or otherwise submit content to our Services, you give Google (and those we work with) a worldwide license to use, host, store, reproduce, modify, create derivative works (such as those resulting from translations, adaptations or other changes we make so that your content works better with our Services), communicate, publish, publicly perform, publicly display and distribute such content." -- http://www.google.com/intl/en/policies/terms/
Save your opt-out preference permanently http://www.google.com/ads/preferences/html/intl/en/plugin/
Ads Preferences Manager http://www.google.com/ads/preferences/?hl=en
Google Advertising and Privacy http://www.google.com/privacy/ads/
However if I must, I will.
I have greylisting and MailScanner to cover spam. filtering. Personally I use spamd on my OpenBSD firewall for greylisting, but have used a Postfix greylisting setup in a corporate environment. MailScanner combines SpamAssassin and Anti-Virus scanning of your mail before delivery. I rarely get spam.
Making sure not to run an open relay isn't all that hard, it's even easier if you use a webmail interface outside your own network.
Learning how to run a small mail server isn't hard. Yes a little up front research is mostly all it takes. My mail server runs mainly hands off. A little up front cost in time saved a recurring monthly cost.
1 - http://flurdy.com/docs/postfix/index.html
2 - http://www.mail-toaster.org/
My employer uses Exchange (for some reason still running Exchange 2003!!!) and I have always struggled getting mail clients to play properly with exchange. I have finally given up and am running Outlook virtually.
Edit: It has IMAP, but isn't free.
In the dashboard all the options are down the bottom to delete all your info etc.
You can just setup your account in for example OSX Mail, after synchronizing your messages will be in ~/Library/Mail (albeit not in a really nice folder structure like pure mbox or maildir, but you should be able to convert them without much hassle). Or you could use offlineimap (http://www.offlineimap.org), which gives you an IMAP dump/backup of your messages (in maildir format if I'm not mistaken). That said, the possibilities of getting your mail from IMAP are almost endless, just choose whatever suits you.
Btw, keeping 20000 mails just about anywhere might be convenient, but I really wonder what for (to clarify, I have maybe 300 mails right now on my own server and I regularly dump old stuff, while dumping for example registration mails right away due to security reasons)?
I'll give offlineimap.org a look..
To answer your other question, I have 20k emails because Gmail doesn't delete by default, so I just archive as I go..
I'm a zero-inbox type so I use labels and searching a lot. Those 20k emails are surprisingly well organized..
In the dashboard all the options are down the bottom to delete all your info etc.
I look around once in awhile, and I never do find a good solution. My current solution is Thunderbird's Lightning extension, and I cringe every time Thunderbird updates, which is often now that Mozilla has the constant update fetish.
I would love to find a reasonably priced calendar solution with a company that I believe will be around for at least five years.
I really wish fastmail did calendars. Are you listening FM?
Fastmail seems to have an impeccable reputation. I have been using sherweb for several years now. Works very well. It's a bit more expensive but you also get a lot more, too. Think calendar, contacts. Plus, most smartphones work wonderfully with the Exchange mailbox. They are located in Canada. Last but not least, the webmail interface finally works well in other browsers than IE. http://www.sherweb.com/hosted-exchange/hosted-exchange-featu... They also support IMAP.
Are there any good hosters based on Zimbra out there?
They are based in the UK, so you have to convert their pricing, but Their service has been fabulous. It's Zimbra. I eventually ended up moving to iCloud, with my new phone, I ended up losing some income streams, and wanted to cut down costs, but otherwise I'd still be with them. There is also 01.com, I used them some too, they are fine, if you need a US based provider.
http://www.microsoft.com/exchange/en-us/pricing-exchange-onl...
http://www.office365.com
Here's a demo video: http://www.youtube.com/watch?v=hOpCmUXLmTA
Note: This is _not_ the same thing as Hotmail.
(This is just a general hint - not against Microsoft. I don't know how they do their job.)
The "Gmail man" ad:
http://www.youtube.com/watch?v=yXqrTfOWx60
http://support.google.com/a/bin/answer.py?hl=en&answer=6...
It's $5/mo (http://www.microsoft.com/en-us/office365/compare-plans.aspx). If that sounds like a lot, keep in mind that you get:
I want my email provider's business model to be getting dollars from me. If I didn't work for MS I perhaps would have done some more research into everything everyone else is mentioning, but I've been very happy with Office 365's email hosting and haven't needed to do any comparison shopping.Google Apps for Business gets you all the features of P1 and E1, for $50/year ($4.17/month), or $5/month if you pay monthly. And Google Apps Free gets you most of the features at $0/month.
Also, Office 365 has silly User Agent checking, they don't support any Linux or Chrome on Mac, even though they support Firefox and Chrome on Windows and Firefox on Mac [1]. My understanding is if you change the User-Agent string it works in Linux.
Silly pricing, silly compatibility restrictions, less features at a higher cost than Google Apps. I'm not getting the appeal.
[1] http://onlinehelp.microsoft.com/office365-enterprises/ff6525...
Any mail host carries the risk of a privacy breach, either accidental, such as a hacker attack, less so, such as selling the service to someone who cares less or completely on purpose - simply turning around and selling your data.
All of these scenarios are vastly less likely to happen for Google in my risk analysis.
The best way for Google to know a lot about me is for them to not give me any good reason not to let them track me, scan my email etc. Any meaningful breach of privacy will erode that faith. Regular ads don't have that faith (an adblocker is invariably the plugin I install), Facebook don't have it (Facebook disconnect is the second one). Google can very easily be added to that list.
Also, Google is large enough and public enough that any significant erosion of privacy will trigger public intervention. A kind of "too big to fail".
The question is, does this undeniable loss of privacy matter and can we know how great that loss will eventually be? I think it does matter, partly because we cannot know or control the extent of the loss and we cannot easily take it back (if at all).
There's also a great security risk if so much sensitive information is stored in one place. Google is certainly more competent than I am in securing their database. But the incentive for someone to steal it from them is orders of magnitude greater as well.
Their economic incentives are aligned in exactly the opposite direction. The more they know about you the more money they make, ergo the recent privacy policy changes which now tie your data across all of their services. In my opinion this is already a privacy violation, even if they don't sell my data to unscrupulous marketers. It should be opt-in. I believe the relevant quote is from Eric Schmidt, ""Google policy is to get right up to the creepy line and not cross it."
If you read their privacy policy, there is an entire section called "Information we share" that is worth reading. It's short, so that's good.
But still, I don't completely buy the notion that as long as Google doesn't resell my data to some "unscrupulous" marketer they are respecting my privacy. If at some point in the future they buy-in to Zuckerbergs "everyone should be open about everything" philosophy and create another privacy policy that isn't opt-in... I guess we're all screwed.
Many people seem to have a problem with the outcome of the process being ad revenue rather than spam suppression, I emphatically do not share that concern.
> But still, I don't completely buy the notion that as long as Google doesn't resell my data to some "unscrupulous" marketer they are respecting my privacy. If at some point in the future they buy-in to Zuckerbergs "everyone should be open about everything" philosophy
My argument centres around the fact that they already have a very profitable business model based on this data and thus they are unlikely to "pull a Facebook".
If they start changing direction on the business model, chances are that it will be foreshadowed some time in advance, and luckily it's downright trivial to switch mail providers as opposed to "switching" away from Facebook.
Yes, but on the other hand, that only prevents them from getting any new emails; they still have all your emails up to the moment you decide to change.
Really? http://advertising.apple.com/
Aside from the fact that Apple is in the ad business (to limited success and motive thus far, though if the hardware sales profit train slowed down you can guarantee they would grow more interest), even if they weren't they still are incredibly interested in data about their customers. All businesses are interested in slicing and dicing and categorizing and maximizing sell through, etc.
I personally don't see how targeted advertising is any more intrusive than spam filtering. Sophisticated spam filters scan for keywords and classify words based which emails you read and reply to, emails from contacts whose emails you read and reply to, etc.
It's all automated in either case. Nobody at Google is reading your mail.
Encrypt your email if you want privacy. For even better privacy, don't use email at all (encrypted or not the headers need to be in the clear).
Encrypting your incoming email[1] fixes that particular problem. It's still not as good as getting others to use PGP, but on the other hand, it doesn't require getting others to use PGP ;)
[1]: https://grepular.com/Automatically_Encrypting_all_Incoming_E...
For me the solution is my own vps, self-hosting. I'm 90% there, having set up the new system, backed up my GMail contents, added a webmail solution and now I'm looking at the last (but so damn important) 10%: Choosing a backup solution (and I won't fully migrate until I have a backup in place that I successfully restored once).
I understand that this isn't for everyone, but for me this proved little work so far and it's really flexible (I'm authenticating via yubikey now, for example).
Seems to me that Google has a better track record than y other IPS email provider you could chose at this time.