Delivery-Date: Sat, 31 May 2014 15:56:12 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by moria.seul.org (Postfix) with ESMTPS id 9355D1E0A89
	for <archiver@seul.org>; Sat, 31 May 2014 15:56:10 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id B1E572F368;
	Sat, 31 May 2014 19:56:08 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 7C7462CA4D
 for <tor-talk@lists.torproject.org>; Sat, 31 May 2014 19:53:33 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 29HrpLmZvZLJ for <tor-talk@lists.torproject.org>;
 Sat, 31 May 2014 19:53:33 +0000 (UTC)
Received: from mail-ie0-x236.google.com (mail-ie0-x236.google.com
 [IPv6:2607:f8b0:4001:c03::236])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 6410E2C392
 for <tor-talk@lists.torproject.org>; Sat, 31 May 2014 19:53:32 +0000 (UTC)
Received: by mail-ie0-f182.google.com with SMTP id x19so3069393ier.13
 for <tor-talk@lists.torproject.org>; Sat, 31 May 2014 12:53:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=cyblings.on.ca; s=google;
 h=message-id:date:from:user-agent:mime-version:to:subject:references
 :in-reply-to:content-type:content-transfer-encoding;
 bh=r2MqxloQ+LhMMyiXo0/W7JQVEFL07hx9VX1s3hSfksY=;
 b=lAIzRdD0HqeHSYrRiF5hCPxoxhdotspeUeQuhvpaN18Qr05KR372B5f8SEymezxuNv
 +CJkMu6I763v1uBF8IOQPzMYrIxg9qwUJVjkXCdOS/LP90WO9c8UMY9lX+3fXzkqUFTY
 61GsydIXWIGrFj5BUUg3IDAQ2ODLsz9VHeuxQ=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to
 :subject:references:in-reply-to:content-type
 :content-transfer-encoding;
 bh=r2MqxloQ+LhMMyiXo0/W7JQVEFL07hx9VX1s3hSfksY=;
 b=Oik4EpdJrbH9okQBrbbwl8E5SRxD4eNfyLNyvG6ZkEuTpIr8cw0Sfa1UJqcbCm/W/x
 kP8VM/YgFyEhdzInD7udtlVnblLNA5p1OE0JsB/Hu9rRMvAeb+uhZCUSqmeocFACSu+i
 W2T6scEEbBw6ySdO7W/fxHFaZqWxvB2CLZPbzd3LjNhanb5F9F/bbF3nytRSrgL0XAhK
 eV/7qCJDXRVoEXU3JVDNFjUkBpamStls4hzs6QYQT0fkKOYNujIJNuJ8X8QiMj0u+1q1
 TEZ8kZ85gNh8xYGB3Wo9ilJ0Xd4TJVjkUagMrpmXnTIETMh6qA1e0mVimo9mEeIMLuCC
 Tk+w==
X-Gm-Message-State: ALoCoQlFSOCBV4T9b7ML9ID/S8jTTvJITAnv4lU3wkrgFNpPd2Kv1sUN2aXkH5c16Y02XnpyFRQW
X-Received: by 10.50.97.68 with SMTP id dy4mr7703330igb.8.1401566009883;
 Sat, 31 May 2014 12:53:29 -0700 (PDT)
Received: from [192.168.1.2] (69-196-152-198.dsl.teksavvy.com.
 [69.196.152.198])
 by mx.google.com with ESMTPSA id h5sm15514980igi.4.2014.05.31.12.53.28
 for <tor-talk@lists.torproject.org>
 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
 Sat, 31 May 2014 12:53:29 -0700 (PDT)
Message-ID: <538A3335.8080905@cyblings.on.ca>
Date: Sat, 31 May 2014 15:53:25 -0400
From: krishna e bera <keb@cyblings.on.ca>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:24.0) Gecko/20100101 Thunderbird/24.5.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <1401367382.65468.YahooMailBasic@web161403.mail.bf1.yahoo.com>
 <538A0A8F.7030106@bitmessage.ch>
In-Reply-To: <538A0A8F.7030106@bitmessage.ch>
X-Enigmail-Version: 1.6
Subject: Re: [tor-talk] Best onion email system?
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On 14-05-31 12:59 PM, Tempest wrote:
> Bobby Brewster:
>> What do people who use .onion addresses use to communicate?
> 
> bitmessage.ch, which runs the bitmail onion you listed, has been usable
> for me. however, the accessibility of the onion has not been consistent
> and, at one point, the project discussed taking it down for good.
> vfemail.net also offers an onion at 344c6kbnjnljjzlz.onion.
> 
> both stand out among the others listed in that they also allow for pop
> clients and not just imap. if one wants to use a mail client like
> thunderbird or icedove with torbirdy and enigmail, pop is ideal because
> imap which still poses some privacy issues at times.

Any email system in which messages are stored unencrypted, or stored
encrypted with anyone except the sender and recipient having the keys,
poses serious privacy risks.  It is possibly worse on .onion servers
because you have no way to know who is running the server and hold them
to account or assess the potential for leakage.

The other issue is of course that even with strong message encryption
the sender and receiver are known to server.  The mixmaster system[0]
is/was supposed to address that problem.

The future:

Keep an eye open for lavaboom.com , they are a startup purporting to
offer a secure email replacement for lavabit.  Perhaps they will have
.onion accessible servers.

Whonix has some sort of mixmaster over .onion setup [1] though it doesnt
seem easy to use.

[0] http://mixmaster.sourceforge.net/
[1] https://www.whonix.org/wiki/Dev/Mixmaster
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

