Encryption for All Mails: Tutanota Uses DANE on Top of SSL and PFS

Tutanota is the most secure email service you can get: On top of its automatic end-to-end encryption, it uses DNSSEC, DANE, DMARC, DKIM, PFS & STARTTLS to secure your connection to Tutanota to the maximum. Today, we have updated our SSL certificates.

To make sure that your connection to Tutanota is securely encrypted, you can verify that your browser is using the correct SSL fingerprints. Our certificate is an Extended Validation Certificate to add extra security.

Verify our SSL fingerprints (valid until 18.09.2018)

SHA1 fingerprint:

61 87 25 25 C4 24 71 77 91 B6 24 9C E7 AB 51 E5 8A 5C 72 5F

SHA-256 fingerprint:

A9 40 B8 C6 B6 60 86 90 90 EF 68 62 B1 0A F2 66 1C F2 93 00 8B AA 77 8A 4F 36 9F 10 79 F3 F8 F0

These fingerprints are valid for app.tutanota.com and tutanota.com.

You can check these fingerprints by clicking on the log symbol to the left of the URL within your browser.

DANE makes Tutanota mails extra secure

Tutanota is one of the few mail services that already support DANE. The DANE protocol effectively protects against MITM attacks and should be implemented by all mail providers. You can verify that your connection to Tutanota is secure by adding a DANE browser plugin to your browser.

Interested in using the most secure email service?

Register your own secure mail account here and protect your entire mailbox with automatic encryption.

Free your data from mass spying!

and get your encrypted mailbox for free now.

Hanna makes Tutanota come to life. Her credo: Every one of us has the right to express any idea freely, or to keep it secret. Encryption is a great tool to achieve the latter.

Posted on: 2017-09-19