EmailDiscussions.com  

Go Back   EmailDiscussions.com > Email Service Provider-specific Forums > Runbox Forum
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read
Stay in touch wirelessly

Runbox Forum Everything related to Runbox should go here: suggestions, comments, complaints, questions, technical issues, etc.

Reply
 
Thread Tools
Old 2 Jun 2019, 05:03 PM   #1
jurastar
Junior Member
 
Join Date: Nov 2018
Posts: 10
runbox privacy issues ?

Runbox is a privacy concious service, right?

It turns out (just tested) emails sent through web and smtp all have the same UID in the email header. So all aliasses have the same UID in the header as the main account. Effectively anyone, especially with finances ( big ads business ) can and will know instantly all aliasses used by a same user ...

I would consider it a big privacy issue, no distinctly different identities when using aliasses ... and all in the plain (pgp doesn't encrypt email headers, so it is all linked through the UID in plain sight)
jurastar is offline   Reply With Quote

Old 5 Jun 2019, 09:42 AM   #2
goky
Member
 
Join Date: Dec 2007
Posts: 58
Thanks for the info...

+1

Runbox care to reply?
goky is offline   Reply With Quote
Old 6 Jun 2019, 06:20 PM   #3
dbowdley
Cornerstone of the Community
 
Join Date: Nov 2008
Location: UK
Posts: 549

Representative of:
Runbox.com
This has been mentioned by a handful of people in recent times, and we understand the concerns. We are looking at alternatives that will prevent aliases and identities from being linked to each other, while still allowing us to track abuse of our services.
dbowdley is offline   Reply With Quote
Old 7 Jun 2019, 02:06 AM   #4
jurastar
Junior Member
 
Join Date: Nov 2018
Posts: 10
Quote:
Originally Posted by dbowdley View Post
... We are looking at alternatives that will prevent aliases and identities from being linked to each other ...
Meaning, you don't care that much or you have a timeline in which you intend to restore your user's privacy ? (bit harshly put, but the runbox statement is vague as can be, sounding like a never fulfilling politician's promise before elections)
jurastar is offline   Reply With Quote
Old 7 Jun 2019, 08:55 AM   #5
dbowdley
Cornerstone of the Community
 
Join Date: Nov 2008
Location: UK
Posts: 549

Representative of:
Runbox.com
Quote:
Originally Posted by jurastar View Post
Meaning, you don't care that much or you have a timeline in which you intend to restore your user's privacy ? (bit harshly put, but the runbox statement is vague as can be, sounding like a never fulfilling politician's promise before elections)
I disagree and would appreciate it if a clear statement was not reinterpreted as meaning something else.

I was careful to say that this was raised with us recently by a small number of people and we have taken that concern seriously enough to be looking (not will be looking at some obscure point in the future) at a way to remove the UID from the headers and put something else in place that won't link aliases to each other. As soon as we have something that will work we will put it in place.
dbowdley is offline   Reply With Quote
Old 10 Jun 2019, 12:06 AM   #6
jurastar
Junior Member
 
Join Date: Nov 2018
Posts: 10
Quote:
Originally Posted by dbowdley View Post
... As soon as we have something that will work we will put it in place.
That's vague, can be next week, can be "waiting for godot"...
jurastar is offline   Reply With Quote
Old 10 Jun 2019, 07:04 PM   #7
Geir
The "e" in e-mail
 
Join Date: Sep 2001
Location: Oslo, Norway
Posts: 2,938

Representative of:
Runbox.com
Quote:
Originally Posted by jurastar View Post
That's vague, can be next week, can be "waiting for godot"...
It can also be today, which is the case (for the webmail).

The same for SMTP is in the works.

- Geir
Geir is offline   Reply With Quote
Old 11 Jun 2019, 06:31 AM   #8
jurastar
Junior Member
 
Join Date: Nov 2018
Posts: 10
Quote:
Originally Posted by Geir View Post
It can also be today, which is the case (for the webmail).

The same for SMTP is in the works.

- Geir
Oh goody ! I'll test it when it's fully there.

EDIT: Took the time to test a few moments ago. webmail works, smtp is still crippled with a UID across main account and aliasses. Implement as said by runbox, good point, but feels a little like a half baked solution was put in pllace to shush waiting for godot?

Last edited by jurastar : 12 Jun 2019 at 06:14 PM.
jurastar is offline   Reply With Quote
Old 27 Jun 2019, 06:29 PM   #9
jurastar
Junior Member
 
Join Date: Nov 2018
Posts: 10
Geir/runbox, Care to update us on EMD ? "Godot" after al ?
jurastar is offline   Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Forum Jump


All times are GMT +9. The time now is 09:24 PM.

 

Copyright EmailDiscussions.com 1998-2022. All Rights Reserved. Privacy Policy