Delivery-Date: Thu, 24 Jul 2014 16:50:50 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id D31DF1E0240
	for <archiver@seul.org>; Thu, 24 Jul 2014 16:50:48 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 8EC2A2F4D8;
	Thu, 24 Jul 2014 20:42:19 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 85E772F440
 for <tor-talk@lists.torproject.org>; Thu, 24 Jul 2014 20:36:29 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id tq7sNJlOsyAI for <tor-talk@lists.torproject.org>;
 Thu, 24 Jul 2014 20:36:29 +0000 (UTC)
Received: from khazad-dum.seul.org (khazad-dum.csail.mit.edu [128.31.0.47])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "moria.seul.org", Issuer "moria.seul.org" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 6CC732E738
 for <tor-talk@lists.torproject.org>; Thu, 24 Jul 2014 20:36:29 +0000 (UTC)
Received: by khazad-dum.seul.org (Postfix, from userid 501)
 id E31CB1E0DDF; Thu, 24 Jul 2014 16:36:26 -0400 (EDT)
Date: Thu, 24 Jul 2014 16:36:26 -0400
From: Roger Dingledine <arma@mit.edu>
To: tor-talk@lists.torproject.org
Message-ID: <20140724203626.GS7408@moria.seul.org>
References: <53D16B7A.6000100@cpunk.us>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <53D16B7A.6000100@cpunk.us>
User-Agent: Mutt/1.5.20 (2009-12-10)
Subject: Re: [tor-talk] Why does requesting for bridges by email require a
 Yahoo or Gmail address?
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On Thu, Jul 24, 2014 at 03:24:26PM -0500, Cypher wrote:
> In light of the last year of disclosures by Edward Snowden, why is Tor
> requiring that I establish an account with an email provider that is
> completely out of my control and has a general history of complying with
> law enforcement data requests? Why those two providers specically?

Because we need an adequately popular provider that makes it hard to
generate lots of addresses. Otherwise an attacker could make millions
of addresses and "be" millions of different people asking for bridges.

https://svn.torproject.org/svn/projects/design-paper/blocking.html#tth_sEc7.4

(Also, it recently became clear that it would be useful for people to
access this provider via https, rather than http, so a network adversary
can't just sniff the bridge addresses off the Internet when the user
reads her mail. And it would also be nice to not use providers that turn
their entire email databases over to the adversary, even unwittingly.
Lots of adversaries and lots of goals to manage at once here.)

--Roger

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

