Privacytools.io: 🆕 Software Suggestion | Mailfence.com

[nitrohorse]

Basic Information

Name: Mailfence
Category: Email
URL: https://mailfence.com/

Description

Why I am making the suggestion

Based on our research last year, it looks like Mailfence didn't support DNSSEC nor DANE which both are now part of our email criteria. But actually it appears they now support both. Let's double-check if they now fully meet our criteria.

My connection with the software

• [x] I will keep the issue up-to-date if something I have said changes or I remember a connection with the software.

[ghost]

It has TLS 1.0 enabled.
https://www.hardenize.com/report/mailfence.com/1589261161#email_tls
https://www.hardenize.com/report/kb.mailfence.com/1589263629#www_tls

It depends only on AES. It does not support Chacha 20.
https://www.hardenize.com/report/mailfence.com/1589261161#www_tls

It does not support Expect CT.
https://www.hardenize.com/report/mailfence.com/1589261161#www_expect_ct

[dngray]

This is in the https://github.com/privacytools/privacytools.io/tree/pr-add_mailfence branch, the reason it was not added is because they currently do not use any kind of encryption at rest.

From: Daniel Gray

Quick question, do you use any encryption at rest?
I expect that you probably do, but I didn't see anything offically mentioned about it.

From: Mailfence Support

That is presently not the case. We are working on it.