Oh, also, they don’t really implement email encryption, which is kinda ironic. Your emails are stored encrypted, and encrypted when sent to other tuta users, but to everyone else, the only way to send an encrypted message is a normal email with a password protected link. Tuta argues that their system is more secure/private, since pgp doesn’t encrypt metadata. I’d argue that not supporting pgp means you aren’t serious about encryption. It might be in theory less private, but it’s the one encryption standard people actually use for email, and not supporting it excludes their user from sending encrypted mail in a sensible way, and from receiving it at all, unless all there contacts also use tuta. Which might be the point.