Skip to main content

Command Palette

Search for a command to run...

Which free mail service is more secure?

Published
•View as Markdown

When you want a free mailbox, which factor is what you think most? The answer is SECURITY obviously.

Unfortunately, the designer of IPv4 didn't think of security when he done, so we must patch encrypt protocols on the data we transfer.

In mail transfer progress, we usually us SSL as encrypt methods. We can send/access our mail via HTTP or SMTP/POP3. So, the question is: which free mail service providers MSPs can provide SSL encryption in whole mail transferring?

First, we access our mailbox with SSL over HTTP. As I've known, there are a few free MSPs use SSL encryption, some is Google, hotmail/live mail, 163/126/188, and hushmail.

The most MSPs above just encrypt the data when they authenticate your account, that mean, only your username and password you type in are encrypted, all data except that are transferred in plain text mode.

When you come to live mail, there are 2 security options, standard and enhanced. If you choose standard security, you will be promoted to key in your account ID and password in a plain page, when you click the log in button, your account info will be sent to a encrypted page, that's safe; if you choose enhanced security, you will be promoted to key in your account ID and password in a encrypted page, that's more secure than standard security mode. Crackers can use DNS spoof to make a fake login page with same FQDN, it's the risk you choose the standard mode. If choose Gmail, you will be in an encrypted page first.

After the authentication, you will go to your mailbox. Live mail and all domestic free MSPs just transfer your mail data in plain text mode. Gmail is different from others, if you log into Gmail from http://mail.google.com, then after authentication, you will access you mailbox in plain text mode; if you log into from https://mail.google.com, then you will access in encrypted mode, which mean, all data transferring from your PCs to Gmail are encrypted, critical and secret data will be transferred in safe.

So, if you just access your mailbox from browse, Gmail is your most secure choice.

Then we check the access through POP3. The most of free MSPs overseas don't provide the access through POP3 except Gmail. Yes, it's Gmail again. Gmail provide POP3 access and more, secure POP3 access. You'll have to connect Gmail's SMTP/POP3 servers with SSL/TLS. In mainland of China, almost all free MSP provide SMTP/POP3 access, but none of them provide secure access. So, the answer is clearly, your only choice of secure POP3 access service come from Gmail.

Google's Gmail is the only choice if you think a lot of security. If you send a mail to receipts that also use Gmail, you can trust your mail couldn't be sniff by anyone except Google.

Google insists his faith: Don't be evil, so I trust him, I love him.

More from this blog

写在新财年前

我不停的有重新开始博客写作的冲动。一直没有付诸行动的原因很多,总结一下,不外乎以下几点: 在当下的简中环境下,因为与中国内地仍有无数联系,我无法做到真正无所顾忌的在线袒露自己的真正观点。 在个人博客和推特之间无法取舍。个人博客确实较重,无法做到推特那样方便。而且据说推特在不久之后也会支持长推特,那就和个人博客更加没有区别了。但是推特上环境过于吵闹,让人无法静下心来输出观点。 懒。或许这才是最

Jun 30, 2023

Hashnode 做博客的一点感受

正在迁移自己的博客,从 Wordpress 到 Hashnode 。发现一些不满意,写在下面: 对标题要求太长。很多中文标题往往两三个字,三四个字即可。但是Hashnode要求至少六七个字符的长度,我经常还得给标题里添加语气废话来扩充长度,满足发布要求; 标题内不支持中英文混合中,英文字母全大写。会自动将标题内的英文字符变为首字母大写,非常讨厌!!! 文章URL是自动从文章标题中取词,但是如果有些文章是系列的,标题相同,只有标题末尾的序号不同,那么这些文章的URL居然是一样的!!!简直是笑话!...

Jul 1, 2022
达

达客宁

153 posts

江南有佳丽 生于帝王州

繁花未曾见 王谢纸上闻

茕茕影孑立 烟雨两凄迷

凭栏望楼台 四百寺安在