Mar 22
We have updated our privacy policy, the specifics have not changed, further technical transparency has been added.
Mar 21
The latest targeted (or AI assisted) phishing attempts are trying to claim that their formatted emails are not email but system messages. We doubt anyone fell for that, especially when SpamAssassin caught it, but anytime is a good time to keep reminding everyone that we (and our systems) only send plain text email and we always tell you to manually enter urls as well as to verify with Notices and helpdesk. Anything different is always a phish.
We have done it this way from our very beginning (two and a half decades ago), seeing then what would be possible if we didn't. We didn't see it being AI back then, but we did see what we used to call "social engineering" becoming an issue with email as formatted email became dominant.
We have done it this way from our very beginning (two and a half decades ago), seeing then what would be possible if we didn't. We didn't see it being AI back then, but we did see what we used to call "social engineering" becoming an issue with email as formatted email became dominant.
Mar 18
Reminder: Do not forget to go to Settings->Password Recovery and set this up if you want the ability to get back into your account should your forget your password. This is the only way for you to recover access to your account.
Mar 18
Cotse subscribers who are now strictly using the CodaMail web interface should visit Settings->Account Information and shut off access to the legacy webmail.
For information on our Sieve filtering and other options, please see our support page.
For information on our Sieve filtering and other options, please see our support page.
Mar 16
New blog post - Why CodaMail Doesn't Offer A Mobile App
Please be careful with the new capabilities, especially the new Block feature in CodaMail. It makes it very easy to instantly block mail at the connection level for email addresses, domains, and (the one to be most careful with) top level domains. This means you can block all .com addresses by having just com as a block and then wonder why example.com email is not showing up. With great control comes great responsibility and we give you the most control of your email available.
Please note: You cannot send to gmail with a gmail from address unless you use gmail SMTP servers. You will get the error "Your email has been blocked because the sender is unauthenticated." This is because gmail, through spf and dmarc, requires that mail with their from address must come from their SMTP servers or it gets rejected. This is the function of the spf and dmarc records and it's not only Google that does this, most services now do. This is why in CodaMail, Identities can have their own SMTP server.
Please be careful with the new capabilities, especially the new Block feature in CodaMail. It makes it very easy to instantly block mail at the connection level for email addresses, domains, and (the one to be most careful with) top level domains. This means you can block all .com addresses by having just com as a block and then wonder why example.com email is not showing up. With great control comes great responsibility and we give you the most control of your email available.
Please note: You cannot send to gmail with a gmail from address unless you use gmail SMTP servers. You will get the error "Your email has been blocked because the sender is unauthenticated." This is because gmail, through spf and dmarc, requires that mail with their from address must come from their SMTP servers or it gets rejected. This is the function of the spf and dmarc records and it's not only Google that does this, most services now do. This is why in CodaMail, Identities can have their own SMTP server.
Mar 16
You can renew your account through Settings-Account Information.
Mar 14
Did you know:
Did you notice that circle picture in the email when you read it? Did you know that is a unique cryptographic hash for that sender?
Did you notice that circle picture in the email when you read it? Did you know that is a unique cryptographic hash for that sender?
Mar 10
Cotse.Net is now CodaMail. All subscribers have been migrated from Cotse into CodaMail. Cotse subscribers who want additional information should see notices on cotse.net.
Mar 8
We will be migrating all Cotse.Net subscribers onto the CodaMail servers tomorrow evening EST (Sun Mar 9). During this time mail will be unavailable for between 3-5 hours.
Feb 13
We have begun offering our Cotse.Net services via the CodaMail subscribe form. However, e-mail will be the only thing available under the codamail.com domain. All proxies, vpn, web hosting, will only be available under the cotse.net domain. We will remain in dual domain setup to isolate e-mail from the proxies. You will receive access instructions upon signup.
Feb 6
Our privacy policy has been updated, no material changes, just additional information added regarding messages being individually encrypted prior to storage.
Feb 5
We updated the Support page for instructions on using the Automatic PGP Encrption and our Masked Aliases.
Feb 4
We have resolved an issue with the PGP Auto-Encrypt when a message does not have any To, CC, or BCC headers.
Jan 30
We have updated our privacy policy to be much more comprehensive.
Jan 24
We are in the final stages of preparation to migrate Cotse.Net into CodaMail. Cotse will run with CodaMail and be available by it's own domain name. It will bring with it Web Hosting, SSH Tunneling, Socks Proxy, and VPN servers all under the Cotse.Net domain. Cotse will expand upon CodaMail's offerings with the addition of more storage, more services, more advanced features, and the ability use the legacy html based webmail or the CodaMail webmail, where cotse subscribers will see additional features and settings. We are targeting the completion of the migration within the next 2 - 3 weeks, depending upon the completion of the beta stage.
Dec 30
Auto-PGP Encryption has been upgraded. There were some cases with address specific auto-encryption where some incoming messages that should have been auto-PGP encrypted were not, mainly if the alias was a BCC. This did not affect those who auto-pgp encrypt all mail, only those who selectively auto-encrypt aliases. It has been resolved and some other housekeeping type code cleanup was completed.
Dec 30
We have completed the third phase of migrating Cotse.Net into this service as the premiere tier, We expect this to be completed end of Jan, early Feb.
Jul 3
We have updated our policies. The meat of them has not changed, they have been edited to be more concise.
Jun 28
Added easy forward all mail option to enable adding the service to your existing email, if desired.
Jun 24
We now offer 30+ domains to choose from for our masked aliases. You choose the alias, you choose the domain, you also get *@alias.domain.com as a catch all with your masked alias.
Jun 16
We have been working on getting the 26 domains that cotse has ready for use with codamail too. After an initial glitch due to the increased load, they are now in testing. If all goes well they should be available for use as masked aliases domains by the end of the month.
May 31
CodaMail will be unavailable for routine maintenance for around 1/2 to 45 minutes this evening around 9 pm EST
May 20
Updated webmail framework
May 9
Removed the requirement to manually set SMTP servers for created Identities, it now falls back to default SMTP server unless you set a custom server for the identity.
May 8
Added some requested interface tweaks, including the block button in message view which provides a choice of ways to block by from address, subdomain, domain, and top level domain with the click of a button. All mail sent directly to codamail (including hosted domains) that matches a blocked entry will be rejected during the SMTP handshake as User Unknown. If mail is fetched from another service and matches an entry in your block list it will be delivered to the trash.
Apr 30
Upgraded many of our features, see Settings.
Apr 20
Added abilty to create custom catch-all masked aliases.
Mar 28
Added masked aliases across all domains we offer. These are root level aliases that you get to pick.
Mar 6
Added the ability to enter CIDR addresses to imap or pop enable so that you can restrict access to imap or pop to specific IPs or subnets.
Phishing Alert:
We are a constant target of phishing e-mail. We will never send you formatted e-mail, we only send plain text. We do not send links for you to click. Do not follow links or click things in emails. Manually come to our website and check notices, to make a payment, etc. As always, email helpdesk if you have questions.
Privacy Policy:
Because we are a privacy service, we do not back up your personal e-mail. This means that when you delete it, it is irretrievably gone. It is not floating around in some backup that can be retrieved from us against your will. However, it also means you must download and save your important mail, if you delete it, or we suffer a data failure, we do what we can with recovery tools, but we most likely cannot restore it.
Recommended Best Practices:
For optimum privacy with the service use a pop3s mail app and set it to delete the mail from the server after retrieval. We also recommend that your local mail store be an encrypted volume. Once your mail is removed from the server by your mail app, we no longer have a copy, no mail backups and we are deliberately not with a large cloud service, instead opting to keep everything in-house, for the same reason. This puts you in full control of your mail and its privacy. When you delete it, it can't be retrieved and there is no record of it being there.