Q&A [HowTo] test your Email provider Security & Privacy

[SecurityNightmares]

After my Q&A - [HowTo] test your DNS Security & Privacy thread now one for Email and also because of wrong statements in Q&A - Looking for a new email provider. & Q&A - Most secure E-mail provider. here now real facts.

You can test your Email provider in two ways:
# take a look at their website to get a first picture how they handle privacy and security at all, because the homepage introduce the product
# test the Email server

In my opinion, both options are important. Here we go:

Website tests:

About the website test

Test for modern Internet Standards like IPv6, DNSSEC, HTTPS, TLS, HSTS, DMARC, DKIM, SPF, STARTTLS and DANE.

internet.nl

Mozilla Observatory

The Mozilla Observatory is a project designed to help developers, system administrators, and security professionals configure their sites safely and securely.

observatory.mozilla.org

Analyse your HTTP response headers

Quickly and easily assess the security of your HTTP response headers

securityheaders.com

CryptCheck

Analyze | Webbkoll - dataskydd.net

This tool helps you check what data-protecting measures a site has taken to help you exercise control over your privacy.

webbkoll.dataskydd.net

SSL Server Test (Powered by Qualys SSL Labs)

A comprehensive free SSL test for your public web servers.

www.ssllabs.com

Email server tests:

My Email Communications Security Assessment (MECSA)

A tool that allows citizens to assess the security and privacy of their email providers

mecsa.jrc.ec.europa.eu

STARTTLS Everywhere

Safer hops for email

starttls-everywhere.org

About the email test

Test for modern Internet Standards like IPv6, DNSSEC, HTTPS, TLS, HSTS, DMARC, DKIM, SPF, STARTTLS and DANE.

internet.nl

CryptCheck

And as nice gimmick, here a overview with different Email provider: Serverlist | dismail.de
(best ones are at top)

Happy testing!

 

[Antus67]

Currentaly running Mailbird ran the email test......................... average at best....................

 

[SecurityNightmares]

Another test site for Email server:

Hardenize: Comprehensive web site configuration test

Hardenize provides a comprehensive and free assessment of web site network and security configuration.

www.hardenize.com

@Mods: i would like it if this thread can be moved to Privacy & Security Guides <3

 

[blacksheep]

 

[SecurityNightmares]

View attachment 239828

Just one of many tests
And this test is only for the website as I written in first post.
Anyway good result

 

[SecurityNightmares]

from Daniel Micay here another way:

send mail to Have DANE? addresses to verify DANE enforcement

&

email check-auth@verifier.port25.com to verify outbound mail passes the configured anti-spoofing