New IMAP servers deployed with Perfect Forward Secrecy

April 11, 2014 5 Comments

Our new IMAP servers were successfully deployed today after upgrading the new ZFS based storage, which resolved an error that had previously caused problems. The technical details of this error can be found in the official bug report from the operating system distributor.

The combination of new, powerful IMAP servers and a modern, ZFS based SAN (Storage Area Network) should significantly improve IMAP performance in the coming days and weeks as we move email accounts to the new storage unit.

Perfect Forward Secrecy support for IMAP

Additionally, the new IMAP servers support Perfect Forward Secrecy on SSL (encrypted) connections, which prevents an unlikely eavesdropper to decrypt the communication between client and server.

You do not have to change anything in your email client to enjoy these new technologies, but do let us know if you experience any problems.

Continue Reading →

Runbox mentioned in The New York Times

February 19, 2014 14 Comments

In an article in The New York Times discussing the challenges E.U. leaders face in protecting individuals’ data, Runbox is mentioned along with Deutsche Telekom as examples of companies providing services that increasingly protect their customers’ privacy.

Being firmly located in Norway, the Runbox email service is governed by strict privacy regulations and is a safe alternative to American email services as well as cloud-based services that move data across borders and jurisdictions.

Read the full article here: E.U. Leaders Seek Way to Protect Individuals’ Data

Continue Reading →

Phishing scam alert

February 10, 2014 Leave a comment

The following fraudulent email was sent to several runbox users today:

From: “Runbox Team” <runbox@nullrunbox.com>
Subject: This Important message is for you!!!

This is most likely a phishing scam trying to obtain logins, so please delete it immediately and DO NOT click on any links in the message. If you have already responded to this email in any way, please change your password immediately, from the main Account page in the webmail.

Continue Reading →

New feature: Tag management

January 26, 2014 4 Comments

Many of our customers use message tags as an alternative to folders in order to organize and categorize their email.

You can now manage your message tags by clicking Tags in the left pane in Webmail, or by going directly to https://runbox.com/mail/tags. The Tag management screen lets you add and delete tags, and get an overview of the messages that are already tagged.

To add a tag to a message, just open the message, select the tag name (or [New tag] to enter a new tag name) and click “Add tag”.

Continue Reading →

Max sub-accounts now available

January 15, 2014 Leave a comment

By popular request we have added a new level of sub-accounts with similar quotas to the main Max account.

The Max Sub-account is now available for purchase from our Payment Options page and includes:

  • 15 GB email storage space
  • 2 GB file storage space
  • 10 GB email bandwidth per week
  • 5000 outgoing messages per day
  • 50 email aliases

Please see our Price Plans for details on all our products.

Continue Reading →

Thank you for your support in 2013!

December 28, 2013 8 Comments

2013 was the year online privacy really came to the forefront of people’s consciousness, after the surveillance revelations especially in the US and the UK. This had a significant impact on Runbox, whose location in Norway made it the service of choice for many people who were concerned about email privacy.

This in turn increased our focus on privacy and security, and over the past 6 months we have taken steps to improve the security of our services further.

We are now investing heavily in new hardware and are deploying privacy features such as support for PGP encryption in order to push Runbox to the forefront of email security and privacy globally.

So thank you for supporting Runbox in 2013 — let’s make next year even better!

Continue Reading →

Privacy is Priceless

Leave a comment

To highlight the importance of online privacy, we have created two privacy-themed Runbox T-shirts now available from our Cafepress store.

Organic Women's T-Shirt: Privacy Is Priceless
Organic Women’s T-Shirt: Privacy Is Priceless
Organic Men's T-Shirt: Privacy Is Priceless
Organic Men’s T-Shirt: Privacy Is Priceless

In line with our values they are of course organic, which also means they’re a little pricier than your regular T-shirt.

But as a Runbox member, you will receive a free year added to your subscription when purchasing one or more of these T-shirts.

They are currently available in two colors, one for men and one for women.

Just forward your receipt to billing@nullrunbox.com and we will happily extend your subscription by one year!

 

Continue Reading →

Extended Validation SSL certificate installed

November 17, 2013 3 Comments

In order to further increase the security of our services we have now installed an Extended Validation SSL certificate on our main website https://runbox.com.

The certificate is issued by the WebTrust certified certificate authority GlobalSign and verifies that Runbox Solutions AS owns and operates the website and domain name runbox.com.

What is Extended Validation SSL?

The Extended Validation SSL (Secure Sockets Layer) certificate provides the strong encryption included with regular certificates, and additonally validates our company’s identity by showing our company name and country code in green to the left of the browser address bar:

runbox.com EV SSL

Extended Validation certificates are only issued after rigorous vetting to verify the legal identity and physical presence of the website owner, establish their exclusive control over the domain name, and confirm the identity and authority of the individuals acting for the website owner.

This Extended Validation certificate also covers https://secure.runbox.com and https://www.runbox.com. Other runbox.com subdomains are still using a regular SSL certificate, which has the same encryption level but not the “green bar” identity validation.

Continue Reading →

Runbox now supports Forward Secrecy

October 1, 2013 4 Comments

In recent weeks there has been some discussion in news outlets about SSL/TLS, which is used by many websites to encrypt the data being transferred between web servers and web browsers.

Since it’s theoretically possible for outsiders to break such encryption, an increasing number of people are requesting improved encryption methods.

What is SSL/TLS?

SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) are cryptographic methods used to secure communication on the Internet. By using pairs of private and public keys, the web server and the client can securely encrypt and decrypt the data being transferred between two parties.

Gold-padlock.svgWhen a web browser connects to a website protected with SSL or TLS (indicated by a padlock icon in the browser) it receives the public key from the server, which is then used to encrypt the subsequent communication. The data can only be decrypted using the private key, which resides on the server.

The problem with keys

However, if someone was able to break in and copy the private key from a server, they would theoretically be able to decrypt any communication to/from that server — provided that they were also able to eavesdrop on the communication.

The solution: Unique keys

To counter this it’s recently become possible to configure web servers to issue a unique key pair for every single connection, and immediately destroy the keys once the session is complete.

This method is called Forward Secrecy because it prevents anyone from retroactively breaking the encryption.

Forward Secrecy on Runbox

Runbox has now implemented Forward Secrecy in order to further improve the security and privacy of our services. It’s now virtually impossible to eavesdrop on the data being transmitted between your web browser and Runbox’ web servers — and you don’t have to do anything in order to enjoy this new level of security.

For those who are interested in the technical details, here is an analysis of the security provided by https://runbox.com, which is now our main address:

https://www.ssllabs.com/ssltest/analyze.html?d=runbox.com

Continue Reading →