| Tuta is ran by absolute morons. A few years ago, under their other domain, they accused Microsoft of suppressing them in a ranty blog post. How? Because their users couldn't sign up for Microsoft accounts using the tutanuta domain. But why? It wasn't Microsoft suppressing them. The fucking morons created an azure tenant validated against the domain. The default setting is to then validate all users with said email against the azure tenant. You can always turn it off but ill advised for security purposes. I even validated that their tenant exists on azure using that domain. The devil in the details mean the morons were using the same domain used by public users, for internal corporate usage which is absolutely fucking insecure to the moon. Nobody should trust these wankers whose first response is to "blame big tech company" instead of understanding basic cybersecurity and internet. Who knows how they even store your emails. There are plenty of other services that I'll trust before the one that runs around for attention like a toddler. |
Care to explain why this is so insecure?