@[email protected] As a reminder, a malicious Tuta server can read the end-to-end encrypted e-mails and shared calendars exchanged on the platform as there is no way to verify the recipient’s public key. This issue has been brought up to the Tuta team 6 years ago…

https://github.com/tutao/tutanota/issues/768

So, maybe less “we’re the most secure e-mail provider in the world” and more concrete security 🙃