Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Thu 20 Sep 2018, 18:58
All times are UTC - 4
 Forum index » Off-Topic Area » Security
E-mail client or webmail? Which is safer?
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [9 Posts]  
Author Message
Antipodal

Joined: 26 Mar 2009
Posts: 244
Location: The other side of the world

PostPosted: Fri 17 Aug 2018, 20:40    Post subject:  E-mail client or webmail? Which is safer?
Subject description: Supposing both are available from the same email provider.
 

Hello everybody! Smile

Using a reputed search engine I have tried to find a clear answer to the second question but I have failed.

Because I’m interested in the opinion of Puppy users and in the first "results pages" of my search I didn’t find answers coming from this forum I have decided to post these questions here.

Your answers will be greatly appreciated.

Thank you for your time
Back to top
View user's profile Send private message 
mikeb


Joined: 23 Nov 2006
Posts: 11156

PostPosted: Sat 18 Aug 2018, 03:12    Post subject:  

Hmmm client.

Well encryption is available for both but client avoids sadverts, unwanted news and browser bullying. If you used IE to access then you have potential virus threats too. Almost certainly will tug at your CPU/memory as well.

The pop3/imap standards have been around for years ...for example I could use say thunderbird 2 to access quite happily. Whereas webmail may decide to demand this weeks chrome release such is the web at the moment.

With a client Imap gives a webmail experience...so what you see is what is on the server.
Pop3 would in effect give you a local storage giving offline access plus if anything happens to the provider your emails are not lost. Imap can be set to do this as well though not sure how recoverable it would be in the event of a server loss.

There are other client bonuses such as ease of running multiple accounts for example.

Just my experience.

mike
Back to top
View user's profile Send private message 
Sylvander

Joined: 15 Dec 2008
Posts: 4382
Location: West Lothian, Scotland, UK

PostPosted: Sat 18 Aug 2018, 08:56    Post subject:  

1.
mikeb wrote:
...client avoids adverts, unwanted news and browser bullying.

a. I use "SaveMyModem" [SMM] to "connect" to SAFELY take a look at what emails are on my POP3 server.
Safe because it only displays the text content; no chance of being infected whilst doing this.
b. Then I choose which emails are time-wasters, and click them for deletion, which is completed when I click "disconnect".

c. Then I run Thunderbird, and it downloads all the emails remaining on the POP3 server [after all the rubbish has been dealt with by SMM].

2.
mikeb wrote:
There are other client bonuses such as ease of running multiple accounts for example.

Exactly!
I have 2 accounts for myself, and formerly there was 1 for my wife also.

I've been using the above for many years.
By both have our ISP's webmail accounts [whether we like it or not], but never normally use them.
Back to top
View user's profile Send private message 
belham2

Joined: 15 Aug 2016
Posts: 1534

PostPosted: Sat 18 Aug 2018, 10:57    Post subject: Re: E-mail client or webmail? Which is safer?
Subject description: Supposing both are available from the same email provider.
 

Antipodal wrote:
Hello everybody! Smile

Using a reputed search engine I have tried to find a clear answer to the second question but I have failed.

Because I’m interested in the opinion of Puppy users and in the first "results pages" of my search I didn’t find answers coming from this forum I have decided to post these questions here.

Your answers will be greatly appreciated.

Thank you for your time



There is nothing, n-o-t-h-i-n-g currently existing today that beats the account security of Gmail + Yubikey 2fa (Versasec needs to now be included in this). **except for the Neo Yubikey, avoid this key, as discussed in this article, but also know Google is/has worked on a fix since this involves WebUSB in Chrome:
https://www.wired.com/story/chrome-yubikey-phishing-webusb/
Google introduced WebUSB last year, so a curde workaround is to use a version of Chrome that doesn't have WebUSB--and use it only for email & nothing else Wink

I have talked about this on this forum for 2 years now, for a reason.

For over 25 months, there has not been one employee at Google (or any other company using either of these 2fa) that has had a breach of their email system and/or employee account. There has even been an offering of high level reward for anyone who could crack Yubikey's 2fa......or at least make it go haywire & not function. No one has even come close to that simple requirement.

They all, Blackhats included, have talked about how infuriating it is to even try. What's even more telling, this is the stuff (yubikey/Versa 2fa) is what all the crypto currency gold diggers are now rushing to adopt.

Until the power of quantum computers becomes a sure, every day thing, this level of protection offered by the likes of Yubikey and Versa will remain indefinitely the best.

It boggles my mind that something like Yubikey has been offered by Gmail for over 2 years now, which will cost a consumer a whopping $17 (price of a basic Yubikey) to set up with a free gmail account, and people are still oblivious like an ostrich.

Forget what you think of Gmail, and their supposed watching/reading of your email. If you need the assurance of completely locking down your email, with never having to worry about anyone, including Google, getting access to your account, Yubikey 2fa "is" the best way going and will be the best way going forward. And if you lose the keys, then the account is gone forever. Because no one can ever get into it again. That is how it should be, and Google makes that crystal clear when you set it up and opt to "only" have 2FA Yubikeys as the means to access it.


Email clients, none currently existing on the planet, even the high-level-cipher-stuff we see at NATO, comes close.



P.S. Now if you are asking about what happens AFTER you get your email open, and people start doing all the dumb things they do while in email (like clicking links, letting pdfs or pics or etc etc open without being in a container) then there is nothing that is going to protect those hare-brained behaviors and no email will be "safe". But with a Yubikey, you could have a login in of "Dummy" with a password or "123456" set up with a Yubikey, and no one will ever be able to get into that account except you with that physical Yubikey.
Back to top
View user's profile Send private message 
greengeek


Joined: 20 Jul 2010
Posts: 5173
Location: Republic of Novo Zelande

PostPosted: Sat 18 Aug 2018, 14:58    Post subject:  

I prefer web mail because I do not trust myself to have adequate backup to protect 10 years of email data if my hard drive goes belly up or my house burns down.

I feel that using a reputable webmail provider makes my data safer over the long term.
Back to top
View user's profile Send private message 
mikeb


Joined: 23 Nov 2006
Posts: 11156

PostPosted: Sat 18 Aug 2018, 15:17    Post subject:  

Quote:
I prefer web mail because I do not trust myself to have adequate backup to protect 10 years of email data if my hard drive goes belly up or my house burns down.

I feel that using a reputable webmail provider makes my data safer over the long term.

The approach is to set pop3 client to download emails but leave on server unless deleted locally. Then you have a copy on your server AND your hard drive. And of course make a backup of your email client profile....stick that online if you like..I do. This means copies in three places.

Had drives die but never lost an email this way .... going back to 2004.

mike
Back to top
View user's profile Send private message 
Antipodal

Joined: 26 Mar 2009
Posts: 244
Location: The other side of the world

PostPosted: Sat 18 Aug 2018, 20:54    Post subject:    

Smile Thank you very much guys!!!
Your comments have been very helpful.
Back to top
View user's profile Send private message 
smokey01


Joined: 30 Dec 2006
Posts: 2765
Location: South Australia :-(

PostPosted: Sun 19 Aug 2018, 17:58    Post subject:  

I prefer a client because it lets me write and read emails offline. I'm not sure if this is possible with web based mail. I do a lot of travelling which includes cruising and internet is usually charged by time.
_________________
Software <-> Distros <-> Tips <-> Newsletters
Back to top
View user's profile Send private message Visit poster's website 
Sylvander

Joined: 15 Dec 2008
Posts: 4382
Location: West Lothian, Scotland, UK

PostPosted: Mon 20 Aug 2018, 06:12    Post subject:  

Does anyone know how to [easily] get SaveMyModem to blacklist domains or senders?
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [9 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0883s ][ Queries: 12 (0.0099s) ][ GZIP on ]