Delivery-Date: Thu, 24 Jul 2014 22:57:27 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FREEMAIL_FROM,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID
	autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 13A411E0A85
	for <archiver@seul.org>; Thu, 24 Jul 2014 22:57:24 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 264D52F806;
	Fri, 25 Jul 2014 02:57:21 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 6486B2EBDC
 for <tor-talk@lists.torproject.org>; Fri, 25 Jul 2014 02:46:36 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id a6LsEC6yzy0j for <tor-talk@lists.torproject.org>;
 Fri, 25 Jul 2014 02:46:36 +0000 (UTC)
Received: from mail-we0-x22f.google.com (mail-we0-x22f.google.com
 [IPv6:2a00:1450:400c:c03::22f])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 1B75C2EAF0
 for <tor-talk@lists.torproject.org>; Fri, 25 Jul 2014 02:46:36 +0000 (UTC)
Received: by mail-we0-f175.google.com with SMTP id t60so3642244wes.20
 for <tor-talk@lists.torproject.org>; Thu, 24 Jul 2014 19:46:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=from:date:to:subject:message-id:references:mime-version
 :content-type:content-disposition:in-reply-to:user-agent;
 bh=j30JCdoTrPrOYopBJozt3qU2Do9JAME5nybcez676fc=;
 b=Z08afNAQDXhwdzbDy0wJCBgD3A89Cb9ALFwHCuhAeFHMdYe39Nw+2v/feRB+awIutn
 yLBrq1cP8iso4ptsu9bu7/xc20+YyCUmK0099bh335lewr3fxm+Owpo97LIp+dkLjsK3
 VkC4vd6g9m/PflzKWao0i613b6SdNSOuRdka7YCiPcWAT2Nv7bi3X0Km9FPNgHduH9UO
 k2Pf6y6t/tu71Sx07zqUfGIvqeGQldMwkSGHmNsLn5kH8h2RngxqbSRMyD/dS70XsV1u
 GLwP1uTvX8lMcp9ZqlCv0TtuZ2CSWhQWWzs1jBxGXEsLsuvfRekDtpbrR3LCPNOhoUek
 In+A==
X-Received: by 10.180.210.132 with SMTP id mu4mr1349630wic.18.1406256393114;
 Thu, 24 Jul 2014 19:46:33 -0700 (PDT)
Received: from localhost (tor-exit.xshells.net. [178.217.187.39])
 by mx.google.com with ESMTPSA id wd7sm21091475wjc.36.2014.07.24.19.46.31
 for <tor-talk@lists.torproject.org>
 (version=TLSv1 cipher=RC4-SHA bits=128/128);
 Thu, 24 Jul 2014 19:46:32 -0700 (PDT)
From: Matthew Finkel <matthew.finkel@gmail.com>
X-Google-Original-From: Matthew Finkel <Matthew.Finkel@gmail.com>
Date: Fri, 25 Jul 2014 02:46:24 +0000
To: tor-talk@lists.torproject.org
Message-ID: <20140725024623.GC13566@localhost>
References: <53D16B7A.6000100@cpunk.us> <20140724203626.GS7408@moria.seul.org>
 <53D177B8.4010306@riseup.net> <53D17AD6.4050803@sec.gd>
 <53D180B2.4060800@riseup.net> <53D181B5.1030205@sec.gd>
 <CAP-DOiR44bEgA=h7g=p_o59fUfpjdqwx3VUac2cb=GkqvMBugg@mail.gmail.com>
 <53D18AA7.80705@cyblings.on.ca>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <53D18AA7.80705@cyblings.on.ca>
User-Agent: Mutt/1.5.20 (2009-06-14)
Subject: Re: [tor-talk] Why does requesting for bridges by email require a
 Yahoo or Gmail address?
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On Thu, Jul 24, 2014 at 06:37:27PM -0400, krishna e bera wrote:
> On 14-07-24 06:29 PM, ideas buenas wrote:
> > I don't trust Gmail nor Yahoo. Roger, found another way. No excuses, please.
> 
> I am curious why Riseup.net isnt in the list of popular and relatively
> secure email providers.  Also there must be several large european and
> asian free email providers, but someone from those regions might have to
> recommend/evaluate them.  How about yandex.ru for example?
> 

See https://trac.torproject.org/projects/tor/ticket/11139

I haven't looked much at other providers recently. We want to keep the
whitelist as small as possible. We can only make the situation worse by
increasing the attack surface. The email distributor is already
significantly weaker than the website. We'd rather provide more
safe/secure distribution methods.

> Another good method is to get a bridge directly from someone you trust.

This is already done informally. Eventually we will try to make this
safer (to some extent)[0].

[0] https://trac.torproject.org/projects/tor/ticket/7520
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

