| MECSA CONFIDENTIAL DELIVERY | MECSA PHISHING AND IDENTITY THEFT | MECSA INTEGRITY OF MESSAGES | Email Security Grader | IMAPS | POP3S | SMTPS | SMTP | DANE | CAA | SPF | DKIM | DMARC | Mozilla Observatory | SSL Labs | htbridge | Crypt Check | security headers | HSTS preload list | Referrers leaked | Cookies | Third-party requests | Third-parties contacted | Comments | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mailbox.org | 5.0 / 5.0 | 5.0 / 5.0 | 5.0 / 5.0 | 87% | A | A | A | A | Yes | No | Yes | Yes | Disabled | B | A+ | A+ | A+ | A | Yes | Partially | 2 | 0 | 0 | google captcha |
| dismail.de | 5.0 / 5.0 | 5.0 / 5.0 | 5.0 / 5.0 | 98% | A+ | X | A+ | A+ | Yes | Yes | Yes | Yes | Yes | A+ | A+ | A+ | A+ | A+ | Yes | No | 0 | 0 | 0 | |
| systemli.org | 5.0 / 5.0 | 5.0 / 5.0 | 5.0 / 5.0 | 93% | B | B | B | B | Yes | Yes | Yes | Yes | Disabled | A+ | A+ | A+ | A | A | Yes | No | 0 | 0 | 0 | |
| tutanota.com | 5.0 / 5.0 | 5.0 / 5.0 | 5.0 / 5.0 | 91% | X | X | X | B | Yes | No | Yes | Yes | Disabled | B | A+ | A+ | B | B | Yes | Leaked | 2 | 0 | 0 | |
| disroot.org | 4.5 / 5.0 | 5.0 / 5.0 | 5.0 / 5.0 | 94% | M | M | Timeout | Timeout | No | No | Yes | Yes | Disabled | B | A+ | A+ | A+ | A | Yes | No | 1 | 0 | 0 | |
| protonmail.com | 4.5 / 5.0 | 5.0 / 5.0 | 5.0 / 5.0 | 91% | X | X | X | X | No | No | Yes | Yes | Yes | B | A+ | A+ | A | B | Yes | Leaked | 2 | 4 | 2 | |
| danwin1210.me | 4.0 / 5.0 | 4.5 / 5.0 | 5.0 / 5.0 | 78% | A | A | A | Timeout | No | No | Yes | Yes | Yes | D+ | A+ | A+ | A | D | Yes | Leaked | 1 | 0 | 0 | |
| gmail.com | 4.0 / 5.0 | 4.5 / 5.0 | 5.0 / 5.0 | 88% | C | C | C | C | No | No | Yes | Yes | No | A- | A | A+ | C | A | Yes | Leaked | 2 | 5 | 3 | |
| lavabit.com | 5.0 / 5.0 | 5.0 / 5.0 | 5.0 / 5.0 | 86% | B | B | B | Timeout | Yes | No | Yes | Yes | Yes | F | A | A | C | F | No | Leaked | 0 | 0 | 0 | |
| posteo.de | 5.0 / 5.0 | 5.0 / 5.0 | 5.0 / 5.0 | 91% | C | C | C | F | Yes | Yes | Yes | Yes | Disabled | B+ | A+ | A+ | A+ | A | Yes | No | 1 | 0 | 0 | |
| mail.de | 5.0 / 5.0 | 5.0 / 5.0 | 5.0 / 5.0 | 66% | F | F | F | Timeout | Yes | Yes | Yes | Yes | Disabled | B | A+ | A+ | B | A | Yes | Leaked | 4 | 10 | 6 | |
| mailfence.com | 4.0 / 5.0 | 4.5 / 5.0 | 5.0 / 5.0 | 91% | B | B | B | B | No | No | Yes | Yes | Disabled | D+ | A+ | A+ | B | F | Yes | Error | Error | Error | Error | |
| fastmail.com | 4.0 / 5.0 | 4.5 / 5.0 | 5.0 / 5.0 | 92% | C | C | C | Timeout | No | No | Yes | Yes | No | A+ | A+ | A | C | A | Yes | Leaked | 4 | 4 | 2 | google_captcha |
| aol.com | 4.0 / 5.0 | 4.5 / 5.0 | 5.0 / 5.0 | 58% | C | C | X | F | No | No | Yes | Yes | Yes | D | A- | A | C | A | No | Partially | 136 | 346 | 103 | |
| 5x2.de | 4.0 / 5.0 | 4.5 / 5.0 | 5.0 / 5.0 | 91% | C | C | C | F | No | Yes | Yes | Yes | Yes | F | A- | A | B | F | No | Leaked | 8 | 4 | 2 | |
| hushmail.com | 4.0 / 5.0 | 3.5 / 5.0 | 3.5 / 5.0 | 91% | B | B | B | Timeout | No | No | Yes | Yes | No | D | A | A+ | B | B | No | Leaked | 2 | 0 | 0 | |
| runbox.com | 4.0 / 5.0 | 3.5 / 5.0 | 3.5 / 5.0 | 93% | C | C | C | C | No | No | Yes | Yes | No | B | A+ | A+ | C | A | No | Leaked | 1 | 0 | 0 | |
| cock.li | 4.0 / 5.0 | 3.5 / 5.0 | 3.5 / 5.0 | 80% | B | B | F | F | No | No | No | Yes | No | D | A+ | A+ | B | D | Yes | Leaked | 4 | 2 | 1 | |
| startmail.com | 4.0 / 5.0 | 3.5 / 5.0 | 3.5 / 5.0 | 91% | F | X | X | C | No | No | Yes | Yes | No | F | A+ | A+ | B | F | No | Leaked | 1 | 0 | 0 | |
| outlook.com | 3.0 / 5.0 | 4.5 / 5.0 | 3.5 / 5.0 | 78% | C | C | X | M | No | No | Yes | Yes | Disabled | D | A | A+ | C | C | No | Leaked | 3 | 42 | 5 | |
| gmx.de | 5.0 / 5.0 | 3.5 / 5.0 | 2.0 / 5.0 | 90% | C | C | C | C | Yes | No | Yes | No | No | C | A+ | A+ | C | B | Yes | Partially | 60 | 227 | 61 | |
| web.de | 5.0 / 5.0 | 3.5 / 5.0 | 2.0 / 5.0 | 90% | C | C | X | C | Yes | No | Yes | No | No | C | A+ | A+ | C | B | Yes | Partially | 55 | 210 | 57 | |
| openmailbox.org | 3.0 / 5.0 | 4.0 / 5.0 | 2.5 / 5.0 | 93% | B | X | F | M | No | No | Yes | No | Disabled | B | A+ | A+ | B | B | No | Leaked | 0 | 2 | 1 | Hostname Mismatch on mail.openmailbox.org |
| arcor.de | 4.0 / 5.0 | 3.0 / 5.0 | 2.0 / 5.0 | 83% | F | X | X | Timeout | No | No | Yes | No | No | F | A- | A- | C | D | No | Leaked | 79 | 296 | 91 | |
| firemail.de | 4.0 / 5.0 | 3.0 / 5.0 | 2.0 / 5.0 | 57% | ToDo | ToDo | ToDo | ToDo | No | No | Yes | No | No | F | F | B | B | F | No | Leaked | 4 | 13 | 8 | Advertising |
| netcourrier.com | 4.0 / 5.0 | 3.0 / 5.0 | 2.0 / 5.0 | 91% | B | B | B | F | No | No | Yes | No | No | D | B | D | F | D | No | Leaked | 1 | 19 | 1 | |
| gandi.net | 4.0 / 5.0 | 3.0 / 5.0 | 2.0 / 5.0 | 95% | C | C | C | B | No | No | Yes | No | No | B- | A | A | C | B | No | Leaked | 2 | 0 | 0 | |
| eclipso.de | 4.0 / 5.0 | 3.0 / 5.0 | 2.0 / 5.0 | 62% | B | B | B | Timeout | No | No | Yes | No | No | C+ | A+ | A | C | B | No | Leaked | 2 | 0 | 0 | google_captcha;Advertising |
| freenet.de | 5.0 / 5.0 | 0.0 / 5.0 | 2.0 / 5.0 | 66% | B | B | B | Timeout | No | Yes | No | No | No | C | A+ | A+ | C | A+ | No | Timeout | Timeout | Timeout | Timeout | |
| ownbay.net | 4.0 / 5.0 | 0.0 / 5.0 | 3.0 / 5.0 | 73% | A | A | A | A | No | No | Syntax error | No | Syntax error | B | A+ | A+ | A | A | No | Partially | 2 | 5 | 5 | google_captcha |
| t-online.de | 4.0 / 5.0 | 0.0 / 5.0 | 2.0 / 5.0 | 66% | C | C | M | C | No | No | No | No | No | F | A | A- | C | F | No | Leaked | 116 | 238 | 91 | |
| emailn.de | 4.0 / 5.0 | 0.0 / 5.0 | 2.0 / 5.0 | 62% | X | X | X | F | No | No | Yes | No | No | D | A | A | C | D | No | Leaked | 5 | 35 | 12 | google_captcha;Advertising |
| online.de | 4.0 / 5.0 | 0.0 / 5.0 | 2.0 / 5.0 | 50% | C | C | C | C | No | No | No | No | No | F | A | A | B | F | No | Leaked | 105 | 130 | 63 | 1und1.de |
| freemail.ox.io | ToDo | ToDo | ToDo | 91% | A | X | A | A | Yes | No | Yes | ToDo | No | B | A+ | A+ | A+ | B | No | Leaked | 0 | 0 | 0 | |
| so36.net | ToDo | ToDo | ToDo | 71% | X | A | A | A | Yes | No | No | ToDo | No | D+ | A+ | A+ | A | D | No | Leaked | 0 | 0 | 0 | |
| boum.org | ToDo | ToDo | ToDo | 73% | A | A | A | Timeout | No | No | No | ToDo | No | D+ | A+ | A | Timeout | D | No | Leaked | 0 | 0 | 0 | |
| immerda.ch | ToDo | ToDo | ToDo | 93% | A | A | F | Timeout | No | No | Yes | ToDo | No | B+ | A | A+ | A | A | No | Leaked | 0 | 0 | 0 | |
| tchncs.de | ToDo | ToDo | ToDo | A | M | Timeout | No TLS | No | No | Yes | ToDo | No | B | A+ | A+ | A+ | A | No | Partially | 3 | 0 | 0 | ||
| hosted.mailcow.de | ToDo | ToDo | ToDo | 93% | B | B | B | C | Yes | No | Yes | ToDo | No | B | A+ | A | C | B | No | No | 1 | 0 | 0 | |
| icloud.com | ToDo | ToDo | ToDo | 84% | C | X | X | ToDo | No | No | Yes | ToDo | No | C+ | A- | A+ | B | B | No | Leaked | 3 | 50 | 4 | |
| kolabnow.com | ToDo | ToDo | ToDo | 85% | Timeout | X | X | B | Yes | Yes | Yes | ToDo | Yes | B+ | A+ | A+ | Timeout | A | No | No | 3 | 1 | 1 | |
| riseup.net | ToDo | ToDo | ToDo | 91% | Timeout | Timeout | Timeout | Timeout | No | Yes | Yes | ToDo | No | C+ | A+ | A+ | Timeout | D | Yes | Leaked | 0 | 0 | 0 | |
| zoho.eu | ToDo | ToDo | ToDo | 86% | B | B | B | B | No | No | Yes | ToDo | No | D | A+ | A+ | B | D | No | Leaked | 13 | 22 | 11 | |
| mail.com | ToDo | ToDo | ToDo | 90% | C | C | C | Timeout | No | No | Yes | ToDo | No | D- | A+ | A+ | C | D | Yes | Leaked | 51 | 113 | 31 | |
| mail.lilo.org | ToDo | ToDo | ToDo | 71% | F | X | X | C | No | No | No | ToDo | No | D+ | A+ | A | C | D | No | Leaked | 2 | 4 | 0 | |
| vmail.me | ToDo | ToDo | ToDo | 87% | B | B | B | B | No | No | Yes | ToDo | No | D | A+ | A+ | B | D | No | Leaked | 2 | 0 | 0 | |
| autistici.org | ToDo | ToDo | ToDo | 93% | X | B | B | B | No | No | Yes | ToDo | No | C | A | A | B | B | No | Leaked | 0 | 0 | 0 | |
| systemausfall.org | ToDo | ToDo | ToDo | 69% | A | A | X | No TLS | No | Yes | No | ToDo | No | B | A+ | A+ | A+ | A | No | No | 1 | 0 | 0 | Hostname Mismatch on MX |
| aikq.de | ToDo | ToDo | ToDo | 66% | M | B | B | B | No | No | Syntax error | ToDo | No | D | A+ | A+ | C | D | No | Leaked | 1 | 7 | 3 | Hostname Mismatch on mx20.aikq.de |
| virginmedia.com | ToDo | ToDo | ToDo | 66% | C | C | C | F | No | No | Yes | ToDo | Yes | F | A | B | B | D | No | Leaked | 33 | 64 | 32 | |
| pobox.com | ToDo | ToDo | ToDo | 91% | C | C | C | Timeout | No | No | Yes | ToDo | No | F | A | A | B | F | No | Leaked | 4 | 3 | 2 | |
| strato.de | ToDo | ToDo | ToDo | 66% | C | C | C | F | No | No | No | ToDo | No | F | A+ | A+ | C | F | No | Leaked | 14 | 15 | 10 | |
| countermail.com | ToDo | ToDo | ToDo | 96% | F | X | F | B | No | No | Yes | ToDo | No | C+ | C | B | B | D | Yes | Leaked | 0 | 0 | 0 | |
| biomail.de | ToDo | ToDo | ToDo | 60% | A | A | ToDo | ToDo | No | No | No | ToDo | No | F | A | A | C | F | No | Leaked | 0 | 0 | 0 | |
| greensta.de | ToDo | ToDo | ToDo | 91% | B | B | F | B | No | No | No | ToDo | No | F | A | A+ | B | F | No | Leaked | 6 | 2 | 1 | |
| yahoo.com | ToDo | ToDo | ToDo | 91% | C | C | C | Timeout | No | No | Yes | ToDo | Yes | F | A | A+ | C | D | No | Partially | 13 | 133 | 15 | |
| directbox.com | ToDo | ToDo | ToDo | 91% | C | C | F | F | Yes | No | Yes | ToDo | No | B | A | A+ | A | A | No | Leaked | 1 | 0 | 0 | |
| unseen.is | ToDo | ToDo | ToDo | 93% | C | C | F | F | No | No | Yes | ToDo | No | C+ | A+ | A+ | A+ | D | Yes | Leaked | 0 | 0 | 0 | |
| 1984.is | ToDo | ToDo | ToDo | 91% | F | F | Timeout | Timeout | No | No | Yes | ToDo | No | C- | A+ | A+ | B | B | No | Leaked | 3 | 0 | 0 | |
| vodafone.de | ToDo | ToDo | ToDo | 83% | F | Timeout | Timeout | F | No | No | Yes | ToDo | No | D | B | C | C | D | No | Leaked | 36 | 90 | 40 | |
| cryptix.de | ToDo | ToDo | ToDo | 68% | M | M | M | C | No | No | No | ToDo | No | F | C | A | B | D | No | Leaked | 3 | 0 | 0 | |
| mail.ru | ToDo | ToDo | ToDo | 91% | Timeout | F | F | Timeout | No | No | Yes | ToDo | Yes | C+ | A+ | A | C | A | No | Leaked | 38 | 98 | 39 | |
| aktivix.org | ToDo | ToDo | ToDo | 89% | F | F | X | Timeout | No | No | Yes | ToDo | No | F | A+ | A+ | A+ | F | No | Leaked | 2 | 0 | 0 | |
| neomailbox.com | ToDo | ToDo | ToDo | 79% | C | F | F | Timeout | No | No | Yes | ToDo | No | F | A | B | A | F | No | Leaked | 0 | 0 | 0 | |
| goneo.de | ToDo | ToDo | ToDo | 66% | F | F | C | C | No | No | No | ToDo | No | D | A+ | A | C | D | No | Leaked | 14 | 16 | 10 | |
| bluewin.ch | ToDo | ToDo | ToDo | 91% | F | F | C | C | No | No | Yes | ToDo | No | F | A | A+ | B | F | No | Leaked | 43 | 161 | 44 | |
| artikel-140.nl | ToDo | ToDo | ToDo | 86% | F | X | A | No TLS | No | No | Yes | ToDo | Yes | D+ | A+ | A+ | A+ | D | No | Leaked | 2 | 0 | 0 | |
| free.de | ToDo | ToDo | ToDo | 93% | F | F | A | No TLS | No | No | No | ToDo | No | F | B | F | F | F | No | Leaked | 0 | 0 | 0 | greylister does not support TLS |
| inbox.com | ToDo | ToDo | ToDo | 78% | C | X | F | No TLS | No | No | Yes | ToDo | No | F | B | A | C | F | No | Leaked | 11 | 9 | 5 | |
| one.com | ToDo | ToDo | ToDo | 91% | F | F | F | F | No | No | Yes | ToDo | No | C- | A+ | A+ | B | D | No | Leaked | 21 | 52 | 20 | |
| safe-mail.net | ToDo | ToDo | ToDo | 61% | ? | ? | ? | No TLS | No | No | Syntax Error | ToDo | No | F | B | A | F | F | No | Leaked | 0 | 0 | 0 | |
| mail.yandex.ru | ToDo | ToDo | ToDo | 46% | F | F | F | Timeout | No | Yes | No | ToDo | No | B- | A | A+ | F | B | No | Leaked | 9 | 45 | 2 | |
| islandnet.com | ToDo | ToDo | ToDo | 58% | F | F | F | Timeout | No | No | No | ToDo | No | F | B | A | F | F | No | Leaked | 3 | 4 | 3 | |
| cox.net | ToDo | ToDo | ToDo | 90% | F | F | F | No TLS | No | No | No | ToDo | No | F | No HTTPS | B | No HTTPS | D | No | Leaked | 180 | 350 | 112 | |
| teknik.io | ToDo | ToDo | ToDo | 86% | F | F | F | F | No | No | Yes | ToDo | No | A+ | B | A | B | A | Yes | Leaked | 2 | 0 | 0 |
To be clear: This list does not want to make any statement about the quality of the email providers or their services. It takes more than just encryption, to provide a secure and reliable email service.
Please send comments and contributions to: a2e7ff3a@dismail.de
If you have an account on one of the servers (with a missing MECSA score), it would be great if you could run a MECSA test and send me the ID of the result. Thank you!
Last update: 2018-04-20
Changes: