Email Privacy Resources
Hand-picked standards, provider documentation, audits, and tools for private and encrypted email. Refreshed periodically; older entries kept where they remain canonical.
Standards & Protocols
- RFC 7208 — Sender Policy Framework (SPF)IETF #authentication
- RFC 6376 — DomainKeys Identified Mail (DKIM) SignaturesIETF #authentication
- RFC 7489 — Domain-based Message Authentication, Reporting & Conformance (DMARC)IETF #authentication
- RFC 4880 — OpenPGP Message FormatIETF #encryption
- RFC 8551 — S/MIME 4.0 Message SpecificationIETF #encryption
- NIST SP 800-177 Rev. 1 — Trustworthy EmailNIST #framework
Provider Documentation & Audits
- Proton Mail: independent security audit by SecuritumProton #audit
- Proton Mail encryption, explainedProton #provider
- Tuta: email encryptionTuta #provider
- Learn how Gmail encrypts your emailsGoogle #provider
- Google Workspace: about client-side encryptionGoogle #provider
- Google Transparency Report: email encryption in transitGoogle #transport
Encryption & Alias Tools
- GnuPG (GNU Privacy Guard)GnuPG Project #tool
- OpenPGPOpenPGP #tool
- Mailvelope — OpenPGP in the browserMailvelope #tool
- Thunderbird — built-in OpenPGP mail clientMZLA / Mozilla #tool
- addy.io — open-source email aliasingaddy.io #aliases
- SimpleLogin — email aliasing (by Proton)SimpleLogin #aliases
Guides & Communities
- EFF Surveillance Self-DefenseElectronic Frontier Foundation #guide
- Privacy Guides: Email ServicesPrivacy Guides #guide
- Privacy Guides: Email AliasingPrivacy Guides #guide
- Electronic Frontier FoundationEFF #community