💾 Archived View for gemini.circumlunar.space › users › laur%C3%AB › mail › cockli.gmi captured on 2024-02-05 at 10:27:03. Gemini links have been rewritten to link to archived content

-=-=-=-=-=-=-

Cock.li

UPDATE May 2021: registrations closed, soon to be invite-only. I guess an inferior RiseUp, then? Or superior, if you really hate the commies.

Sounds good at first glance - supports mail clients (though Claws Mail could not automatically detect the settings and required manual configuration), does not ask for personal information, "allows registration and usage using TOR and other privacy services," and "is run by "some dude", not a business". So is this the service to use? For that, we will have to see what data does it collect, as usual:

IMAP and SMTP logs include: When an E-mail is sent, the username, destination e-mail address, and information about the connection (like IP address, quota information) When you connect to IMAP, what IP address and username (if any) you are logging in with, and if that login was successful

These, according to cock.li's privacy policy, are stored for 48 to 72 hours. When you visit their website, cock.li stores this information: "HTTP access logs containing your IP address, user agent, and type/location of your requests". They say it's not related to your account, but it would be trivial to connect them.

Cock.li's privacy policy is a little unclear on that point, but it seems that you can delete all your data manually - aside from registration information - and it will be gone immediately. Removing the latter requires erasing your account, but even then, that data will be kept for 30 days.

Cock.li has to be commended on its honesty. Privacy policy and ToS are short and straight to the point. It admits it can read your mail and that it cooperates fully with law enforcement; transparency and donation reports are also available. There's one other thing you might want to know about though...

https://arstechnica.com/tech-policy/2015/12/cock-li-e-mail-server-seized-by-german-authorities-admin-announces/ (archive) (MozArchive) .

"That means that SSL keys and private keys and full mail content of all 64,500 of my users, as well as hashed passwords, registration time, and the last seven days of logs were all confiscated and now are in the hands of German authorities,

Yeah...I mean, could this have gone any worse? The victims of this breach were probably wishing they never cared about this "privacy" stuff and still kept using Gmail, haha. Also, forget about having a normal domain name with this guy - they are all shitty jokes about cocks, rape, memes like blazeit and others you'd rather not show to most people. Another really significant issue is how often the cock.li domain is blocked on various sites. With that in mind, I cannot anymore say that this is a good choice at all. It does at least have an onion domain at http://mail.cockmailwwfvrtqj.onion/; this, however, does not prevent them from reading your mail or storing the metadata.