4SecureMail vs Cock.li

4SecureMail provides secure email accounts and managed email hosting for businesses and consumers. Accounts support POP, IMAP, and SMTP with SSL/TLS and work with standard clients such as Outlook and Thunderbird. SecureVault encrypts sensitive outgoing email for outside recipients, who read and reply through a secure web link. Spam protection includes SpamAssassin and a challenge/response whitelist; a server-based ICSA-certified virus scanner is also included. The FAQ says SSL/TLS sessions begin before login credentials are exchanged, and that TLS 1.2 and Perfect Forward Secrecy are supported. The company describes support for HIPAA, GLB, and SOX, can provide or review a Business Associate Agreement, and offers off-site legal archiving at additional cost. IMAP IDLE notifications and simultaneous connections from multiple devices are supported. Outgoing attachments can total up to 5 GB across all recipients. Plans range from one mailbox with 500 MB of storage and no custom domain to options with multiple mailboxes, more storage, and custom domains. The service has no free plan but offers a free trial; listed pricing starts at $8.24/mo. It is available worldwide to holders of major credit cards and supports U.S. currency.

Cock.li is a public email host from Cock.li, founded in 2013, offering email accounts and webmail through the web, Android, and iOS. Its services are free, with the Free plan listed at free. Mail access includes IMAP and POP at mail.cock.li, while XMPP is listed at xmpp.cock.li. Registration does not require personally identifiable information. New accounts cannot send mail until the user completes a browser proof-of-work challenge that uses a few minutes of CPU time. Cock-mail is described as an open-source, client-side webmail client connecting directly to the IMAP server over websockets, but its 0.0.1 alpha release lacks major features including SMTP. The privacy policy says registration details, stored mail, XMPP data, and 48–72 hours of IMAP and SMTP logs may be retained. Email is automatically scanned for spam. Account information is encrypted server-side, but mail may travel without encryption when TLS is unavailable or not attempted.