[initplus]

If I get an email from @tuta.com, how do I know if it’s an official staff account, or a member of the public?

[yunohn]

That’s a great point, but not the point that GP was making. I’d like to learn more about the inherent domain sharing security problem they ranted about.

Edit: This public issue seems to imply they have a way to mark system/admin emails: https://github.com/tutao/tutanota/issues/6708