Forward Email Webmail 隐私评级

摘要

按网页邮箱的标准，Forward Email Webmail 得分 74/100（等级 C）。 它满足 13 项标准中的 6 项：开源、无广告或数据出售、独立审计、告知用户有关请求、OpenPGP 支持和直接连接。 它部分满足无跟踪器或遥测、透明度报告、TLS 配置、安全标头、拦截远程内容和可自托管。 它不满足适用于任何服务商。 它的总部位于美国：五眼联盟成员; 受美国 CLOUD Act 约束。 自动测试：SSL Labs 等级 B和Mozilla HTTP Observatory 等级 B+。

分数 74/100。 评分方式

标准

• ✔是

  开源 ×3权重 3/3 源码可见

  运行产品所需的全部源代码是否都已公开？

  All code is public. The webmail app is under the source-available Business Source License 1.1, which becomes MPL-2.0 four years after each release, and the Forward Email service behind it is published under MPL-2.0 and BUSL-1.1.

  github.com

• ◐部分

  无跟踪器或遥测 ×3权重 3/3

  网站和应用是否没有第三方跟踪器，任何统计分析均为匿名，且任何遥测默认关闭？

  No third-party analytics in the webmail. The privacy policy describes first-party anonymized analytics of page views and service usage, including API use, that is on by default.

  forwardemail.net

• ✔是

  无广告或数据出售 ×2权重 2/3

  产品的资金是否不依赖广告、广告定向或出售用户数据？

  Funded by paid plans. No ads, and user data is not shared with third parties.

  forwardemail.net

• ✔是

  独立审计 ×2权重 2/3

  过去三年内是否发布过独立的安全或隐私审计？

  Cure53 audited the webmail source code, including its client-side logic, together with the Forward Email service.

  cure53.de

• ◐部分

  透明度报告 ×2权重 2/3

  服务商是否定期公布收到的政府和法律请求数量及其处理方式？

  The technical whitepaper (section 9.3) publishes the government request policy and commits to transparency reports with request counts. A report with counts is not published yet.

  forwardemail.net

• ✔是

  告知用户有关请求 ×1权重 1/3

  除非法院禁止，服务商是否承诺将针对用户数据的请求告知用户？

  Users are notified of requests when legally allowed, with notice after disclosure when advance notice is prohibited.

  forwardemail.net

• ✔是

  OpenPGP 支持 ×2权重 2/3

  应用能否通过内置功能或官方附加组件，使用 OpenPGP 加密和签名邮件？

  OpenPGP encryption and signing are built in.

  github.com

• ✔是

  直接连接 ×3权重 3/3

  应用是否直接连接到您的邮件服务器，而不经由厂商的服务器传递邮件或密码？

  The browser connects directly to the Forward Email API, which is the mail server, with no separate sync service.

  github.com

• ◐部分

  拦截远程内容 ×2权重 2/3

  是否默认拦截远程图片和跟踪像素？

  Tracking pixels are blocked by default, but other remote images load unless blocking is turned on in settings.

  github.com

• ✖否

  适用于任何服务商 ×1权重 1/3

  应用是否适用于任何标准 IMAP 和 SMTP 服务商？

  Works only with Forward Email accounts. The maintainers state that a future version is planned to support any IMAP and SMTP provider.

  forwardemail.net

• ◐部分

  可自托管 ×1权重 1/3

  网页邮箱能否安装在您自己的服务器上？

  The static web app can be built and served from another server, with a configurable API address, but there is no official self-hosting guide and it only works with the Forward Email API.

  github.com

自动测试

• ◐部分

  TLS 配置 ×2权重 2/3

  网站能否以 A 或更高的等级通过 Qualys SSL Labs 测试？

  Grade B

  ssllabs.com

• ◐部分

  安全标头 ×1权重 1/3

  网站能否以 A 或更高的等级通过 Mozilla HTTP Observatory 测试？

  Grade B+ (80/100+)

  developer.mozilla.org

• …尚未测试

  现代 Web 标准 ×1权重 1/3

  网站在 Internet.nl 网站测试中的得分是否达到 90% 或更高？

  Not tested yet.