Oct 28 - Express1 is back up.
Oct 28 - Express1 is currently down with a hardware failure, this is being addressed.
Oct 28 - During a recent deployment for some configuration changes, an incorrect version of a dovecot configuration file was deployed. This resulted in a weak Diffie-Hellmann parameter (1024 instead of 2048) to be used in our imaps and pops protocols, as well as some weaker ciphers to be available. We were notified by one of our subscribers and it has been corrected. We do not see evidence of any of our subscriber's email clients having selected a weaker cipher during this time, which could be an indication of a MITM attack on that subscriber. This did not affect webmail users.
Phishing: We are a constant target of phishing e-mail. We will never send you formatted e-mail, we only send plain text. We do not send links for you to click. Do not follow links or click things in emails. Manually come to our website and check notices, to make a payment, etc. As always, email helpdesk if you have questions.
Reminder: Because we are a privacy service, we do not back up your personal e-mail. This means that when you delete it, it is irretreivably gone. It is not floating around in some backup that can be retrieved from us against your will. However, it also means you must download and save your important mail, if you delete it, or we suffer a data failure, we do what we can with recovery tools, but we most likely cannot restore it.
For optimum privacy with the service use a pop3s mail app and set it to delete the mail from the server after retrieval. We also recommend that your local mail store be an encrypted volume. Once your mail is removed from the server by your mail app, we no longer have a copy, no mail backups and we are deliberately not with a large cloud service, instead opting to keep everything in-house, for the same reason. This puts you in full control of your mail and its privacy. When you delete it, it can't be retrieved and there is no record of it being there.