Re: [tor-talk] Towards a Torbutton for Thunderbird (torbutton-birdy)

[Jacob Appelbaum <jacob@xxxxxxxxxxxxx>]

On 05/05/2012 03:45 PM, Randolph D. wrote:
> Jacob, thanks for the info about this important initiarive and project.

You're welcome.

> But it makes no sense for me, the email message can be read by the outproxy.

It's possible for users to use SSL/TLS or STARTTLS in Thunderbird - this
means that the exit node will learn about as much as any other HTTPS
connection over Tor.

> Only if it is encrypted it makes sense.

It depends on the goal - I don't want my mail server to know my location
every time that I check my email. There are other reasons of course.

> Furthermore please look at http://interface.sf.net
> this is an encryted chat and email app based on libretroshare from
> http://retroshare.sf.net
> this linbretroshare has currently not a proxy code, if that is in, you
> have an encrypted channel over tor and can email withoout exposing the
> IP nor the content of the email, as all is encrypted by default.

I haven't audited retroshare - is there a good protocol document? I
found a few things but they weren't very clearly written or concise.


> What do you think? does it make sense to add a proxy to libretroshare
> to bundle this to tor? the gui clone interface.sf.net could be a good
> app for that. social networking over tor. Please use modern and secure
> email technology, not Thunderbird.

Are you the author of libretroshare? If so, I encourage you to submit
your design documents as a paper to PETS - it sounds like it is an
interesting project:
http://www.petsymposium.org/

I think if you want to use Tor with your software, I'm happy to see it
work properly over Tor. There are many people who use Thunderbird and
I'd like to help them use their mail/news/rss client with Tor - just as
we do with Firefox and Torbutton in the form of Tor Browser.

All the best,
Jacob

> Regards Randolph.
> 
> 2012/5/5 Jacob Appelbaum <jacob@xxxxxxxxxxxxx>:
>> Hi,
>>
>> A few Tor hackers (Sukhbir, tagnar, myself, etc) are working on a plugin
>> for Thunderbird that attempts to Torify it properly. The codename for
>> now is 'torbutton-birdy' and it is based largely on the seminal
>> analysis[-1] by tagnaq. Two core goals in addition to Torification is
>> the integration with MixGUI[0] and of course Enigmail[1].
>>
>> At the moment the code is entirely un-reviewed and is not ready for real
>> use. If you'd like to test it, we'd very much appreciate it. We have not
>> uploaded the extension to Mozilla's addon site - I'm not sure we'll ever
>> do that as a result of data retention issues and other stuff.
>>
>> Here's the code:
>> https://github.com/ioerror/torbutton-birdy
>>
>> ######################################################
>> !!!!! WARNING DO NOT USE FOR ANYTHING IMPORTANT !!!!!!
>> ######################################################
>>
>> Here's the XPI to install:
>> https://github.com/downloads/ioerror/torbutton-birdy/torbutton-birdy.xpi
>>
>> ######################################################
>> !!!!! WARNING DO NOT USE FOR ANYTHING IMPORTANT !!!!!!
>> ######################################################
>>
>> ( Please note that this is not a signed xpi as my gpg keys have recently
>> expired. I'm about to cross a border, so I'll not be making new keys for
>> a few days. )
>>
>> All the best,
>> Jacob
>>
>> [-1]
>> https://trac.torproject.org/projects/tor/attachment/wiki/doc/TorifyHOWTO/EMail/Thunderbird/Thunderbird%2BTor.pdf
>> [0] https://github.com/cryptodotis/mixgui
>> [1] http://enigmail.mozdev.org/home/index.php.html
>> _______________________________________________
>> tor-talk mailing list
>> tor-talk@xxxxxxxxxxxxxxxxxxxx
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
> 

_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk