[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: xB Mail: Anonymous Email Client
- To: or-talk@xxxxxxxxxxxxx
- Subject: Re: xB Mail: Anonymous Email Client
- From: Dawney Smith <dawneysmith@xxxxxxxxxxxxxx>
- Date: Fri, 22 Aug 2008 10:41:48 +0100
- Delivered-to: archiver@xxxxxxxx
- Delivered-to: or-talk-outgoing@xxxxxxxx
- Delivered-to: or-talk@xxxxxxxx
- Delivery-date: Fri, 22 Aug 2008 05:41:46 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :x-enigmail-version:openpgp:content-type:content-transfer-encoding; bh=6wxrS1hBH/uWckVLnAUHvxXK0jemfjLezJFF/qrW+Zk=; b=mZthzFf+iMPpAn0JnY3EbRS7bJpCX+xTisW3z4dv0AqEteprsU5eQWCVnhG07MUiyD cZrmF1XQiz3jE6rRkbpFV4hjsFPPEdq13B7CQYqAT4+tEQx8EDwFUOjgnSCta9E3mgGq ibKCTY/p6Rlq7xtD547DLO7/T6Mrtetq1EJJ4=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:x-enigmail-version:openpgp:content-type :content-transfer-encoding; b=UkACuAz+psTO07tu4FEPmsqK3iB8pHXTUQ0k0BQ9pUhwhAxx/Um27aLdieaEgm6cNd NdynDa9MqaYdabgP1ko1BUmg5K3R/6lwMZ/k3n0D6VhVqNPNmva0KpkKnYonvV/RsAlm KInr5W6YJEF9kgU0lFOOZIKx5mm7PqU/7GQhs=
- In-reply-to: <48ADA404.4000900@xxxxxxxxx>
- Openpgp: id=5D6281F2
- References: <48AC8038.8050907@xxxxxxxxx> <48AD277D.9080808@xxxxxxxxxxxxxx> <48ADA404.4000900@xxxxxxxxx>
- Reply-to: or-talk@xxxxxxxxxxxxx
- Sender: owner-or-talk@xxxxxxxxxxxxx
- User-agent: Thunderbird 2.0.0.16 (X11/20080724)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Arrakis wrote:
>> 2.) Obfuscate the data sent in the EHLO so it doesn't leak the hostname/ip
>
> I'll have to check how thunderbird implements smtp.
It must be possible as TorButton manages to do it.
>> 7.) Turn off return receipts and Junk filtering
>
> Junk filtering is sticky. Because we are going to use thunderbird, we
> can create bayesian filters in token form, and push token updates to
> the client. It would be kind of amazing if the latest paris hilton
> spam was blocked before the user had to read it. The management program
> could update such a token over https, un-anonymized, every x time.
The main reason I mentioned this one is because it is an unknown
quantity to me. I'm not sure if Thunderbird leaks any information with
it's Spam filtering. Even if it doesn't now, I'm not sure if an upgrade
wouldn't cause it to in future. So to be safe, I leave it off.
>> 8.) For convenience rather than security, I'd make it automatically turn
>> on the options to download the full messages to disk.
>
> Thats one of those distasteful things about mail, and one of the reasons
> I prefer IMAP over POP. POP is fine if you're encrypting your message
> base, but if not, IMAP is preferable. But I tell you what... i really
> *could* encrypt the messagebase on thunderbird. No telling how secure
> that would really be in windows implementation, but it is certainly
> a fun idea.
Yeah, I prefer IMAP, but I like a local copy of the mail so it doesn't
need to connect to the server over Tor every time I want to read a
message. Encrypted on disk would be a nice option.
Another thing worth looking at would be how Thunderbird performs
automatic extension updates. Oh, and generating a list of extensions
that are safe/unsafe to use with Thunderbird.
- --
Dawn
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD4DBQFIronWcoR2aV1igfIRAnhxAJdeawiNTbd1ZRG+4JAE4LzQMfvLAKCYxDHu
U1/xQbKTtgbFiNFn4VWt1A==
=IZ+7
-----END PGP SIGNATURE-----