[huhtenberg]

The only way all claimed features can work is if the email body remains on their servers at all times. I.e. they send some sort of wrapper that either iframes the content or talks to the Pluto backend in some other form or fashion. Needless to say - good luck with that!

[eli]

No iframes in email. I bet it's rendered as an image.

Either way, you're trusting them with the contents of a message that, by definition, you kinda wanted to keep private.

[jgalt212]

I guess so, but that's the same situation as it is with any other email provider (yahoo, gmail, etc). The difference here is that you are only trusting Pluto. With other providers, you are trusting the provider and all recipients, whether they are an intended recipient or not.

In short, there is no free lunch, but this seems like a decent solution as you only have to trust one entity. Its up to us (potential users) to decide to trust them or not.

[dgobaud]

Indeed there is no free lunch and until email end-to-end encryption is widely supported, the unencrypted content is going to be stored somewhere. Pluto has an easily accessible eliminate option that deletes all copies of the email from our servers (and given the way Pluto works, also the recipient's access to the content). You can click “Eliminate all emails” on the top right signed-in home page to eliminate all emails or you can do it on a per-email basis by clicking “Eliminate Completely” in the top left of an email details page. We also support an auto-eliminate setting that eliminates an email from our servers upon unsend or auto-expire.

David Gobaud, Co-Founder @ Pluto Mail

[eli]

Actually gmail proxies all image requests from emails so they would see it too. But yes, point taken.