e-mail

12 replies [Last post]
Spinoza
Offline
Joined: 07/07/2013

This is not a question about Trisquel, but i assume this community is busy with privacy as well. Do you know a free and privacyminded e-mailprovider ? I thought about hushmail.

GNUser
Offline
Joined: 07/17/2013

Hushmail has admitted to providing information to governments before.
You have some alternatives, and while none is perfect, you should analyze each one carefully, one will serve you well.

1. Setup your own mail server. Not easy to do, but not impossible. You will spend more electricity but it will be safer.
2. https://riseup.net/en
this one has been known to be privacy minded. They claim to support activists and such, so take a look at their website.
3. https://lavabit.com
This one is actually run by a small company that has been around for a while. They use a very simple web interface (which is good) and they seem to be very privacy/security minded. Take a look there.
4. http://www.autistici.org/en/index.html
Similar to riseup, they seem legit. Not sure because never used them.
5. You can use tormail, if you want only anonymous email. tormail.org it will direct you to a tor hidden service, which we have no idea who is running, nor where. Anonymous, but keep in mind, probably they read all your emails. So, for some things is good, for others is a waste.

Hope it helped you. You can take a look at prism-break.org and see the email services they choose.

joek3
Offline
Joined: 05/21/2011

> Do you know a free and privacyminded e-mailprovider ?
Hmm, maybe there will soon be a new star in the sky: StartMail [1]

(apropos privacy: in any case, already, there's "the world's most private search engine") [2]

[1] https://beta.startmail.com/
[2] https://ixquick.com/

quantumgravity
Offline
Joined: 04/22/2013

I use lavabit, because they claim to respect your privacy.
But this is no good solution.
Better would be an own email server and sending only encrypted messages.
However, you can choose the most privacy-protecting email provider on earth or run your own server, it's useless if all your friend and your business contacts are using gmail.
And that's a real problem at the moment.

Spinoza
Offline
Joined: 07/07/2013

Thank you all !!!

lloydsmart

I am a member!

Offline
Joined: 12/22/2012

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Setting up your own email server is definitely the way to go. It can be difficult, but it's not nearly as hard as some on the Internet would have you believe.

I, and I'm sure many others here, will be happy to provide help and advice if needed.

You can even install a mail server on a small, low-power platform like the Raspberry Pi, or similar devices, so it needn't cost a fortune in hardware and electricity.

(Although I believe it's currently impossible to boot the Rπ without a proprietary firmware blob. ymmv).

And of course, it goes without saying to use GPG wherever possible. :-)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iF4EAREIAAYFAlH27G4ACgkQgijxUCZnvltijQEAtilXtthMiVAGjtrS4aIb3VA5
YZb5iDWkjQP/sTQNfkYBAMcCCRKSWcEU3z0MnrhmR7KB+L/+qtDc3l62hTd8vL6l
=Fje5
-----END PGP SIGNATURE-----

quantumgravity
Offline
Joined: 04/22/2013

> (Although I believe it's currently impossible to boot the Rπ without a proprietary firmware blob. ymmv).

Some people tried to explain it to me, but I didn't understand until now.
I'm running the pi with debian and only the free repos.
So my operating system doesn't contain any proprietary software, though I'm able to run the pi (text mode).
I conclude that it's something similar like a non-free bios, but I don't really know.
If I'm wrong, it would be nice if anyone could explain to me how I'm able to run the pi with a free-debian.

BlinkingArrow

I am a member!

Offline
Joined: 12/27/2011

I agree with lloydsmart. This is the only way. If you must use a service just make sure it isn't in the U.S.

a_slacker_here
Offline
Joined: 06/29/2013

Have you heard about mykolab?

https://mykolab.com/

I've heard it is promising but they are on beta.

GNUser
Offline
Joined: 07/17/2013

Some extra thoughts:

1. delete an email once you read it. Download if you want to keep it, but delete. It won't protect you against the SERVER but it will protect you against SOMEONE who gets access to you email account (no past messages for him to read).

2. If you send and receive emails from someone who uses Windows and gmail/hotmail/yahoomail/etc, you are doomed. It won't take NSA to have access to your emails, and probably to discover WHO you are even if you use Tormail for example.

3. Encryption should be the name of the game. But, how on earth do you explain to someone that they should use encryption? They won't listen unless they went through the TERRIBLE experience of having someone reading their emails and using that private access to attack them among family members. Happened to me before, and I... Well, suffice to say that my choice of using Trisquel actually has something to do with that. From the moment you find yourself in such a position of... powerlessness, you actually start fighting back and running if you must and never look back.

4. Separate identities. Separate email accounts (one for family and friends, other for internet chats, other for...) are a way to keep yourself out of trouble. I don't want to encourage anyone to do this, but I once made a little fun trick, and went to Google.com and searched for some of my friends emails like "name at domain" and actually discovered some websites REVEAL your email. Doing that I discovered some old blogs of my friends and they were like "how the heck you know I used to have that blog?" So, you should probably use separate accounts and never give one through the other. Of course, Tor is your friend too, preventing people from connecting the email account to your IP (and real identity).

5. Careful with email clients. They are stupid enough to save emails and passwords as plain text, they don't hide the main inbox when asking for a password, and other such stupidities. Webmail interface is your friend.

Well, that's it. I hope some of these help some people =)

GNUUUU
Offline
Joined: 02/22/2011

"searched for some of my friends emails like "email [at] host [dot] com" and actually discovered some websites REVEAL your email. Doing that I discovered some old blogs of my friends"

same here.

a_slacker_here
Offline
Joined: 06/29/2013

Anyone knows if "Evolution" is secure?

GNUser
Offline
Joined: 07/17/2013

Well, Evolution is as much safe as any other... You still have the passwords and emails stored in your system in a way that they can be compromised. But, evolution is not a bad choice of course.
Actually, I appreciate the way Trisquel comes prepared for "social interaction on the web". If I was not so privacy/security minded, I would use Liferea to read a LOT of updates on many websites and I would love to have my email so easily set up and synchronized. But as it is, that's not the path I choose for me :)