Re: Tor & Email?
Wish mail could multiply thread replies. Here are combined thoughts on the related 'Tor & Email?' and 'Tor and google groups' threads... >> Maybe you should start up a gmail activation service! Or at least for >> us here in the group! How many accounts will gmail and the other online entities allow under one number? Do they crosscheck country/region to number and are you willing to risk loss of every underlying account if so or for other 'related link' reasons. Given that, how many of you would be willing to drop cash in the mail to provide anon support for the fractional cost of the phone/SIM? The only real issue is the cost, oversubscription rate and account linking. Not the anonymity of the physical mobile SIM holder. >> able to enter the account and ... Amongst anons there would surely be some honor in this. >> Though I could open an account at gmail (with SMS) >> Belarus and an Azeri exit node and SMS verification was required >> tried to creat gmail-accounts with Netherlands and German exits In general, when you all are testing whatever service it might be, and especially since you are already picking the node, please be sure to state the node fingerprint so others can confirm. Particularly upon success. Andrew, I recall you said you were recently (the only one of two of us) able to create a Gmail account via Tor but did not know your exit. Do you remember whether or not you supplied a 'secondary' email address to them? And what domain/service it was? People should mention the fingerprint and use of any such mail domain/service when testing. As in my tests of 2010/12/29. As well as whether they used the 'broken' .exit notation or MAPADDRESS, what was MAPADDRESS'ed, etc. > I then tried again with a German exit, and had no problems. Jon, really? Do you recall the fingerprint and any recovery domain? And no captcha seems very strange. And Germany would give you @googlemail, not @gmail right? >> I am using Privoxy Privoxy alters a whole bunch more stuff than polipo. I can see where it would cause undue problems. I do ad blocking with MAPADDRESS so polipo is fine. >> As explained to me in Belgium, the law says they have to see an ID Many laws and policies say only to check, not record or some other such scheme. Many folks feel the need to go above and beyond what is written even though it serves them no particular benefit and adds to their cost, and in fact risk, of doing business. Bad will be bad, good will be good. That's why many have no problem with anonymity, because it doesn't affect that regard. Anti-anons seem to be really about profiling for profiling's sake, or slowing the normal course of historical change so that they may continue to reap the current state before naturally dying of old age. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
Jon wrote: > > On Wed, Dec 29, 2010 at 10:38 AM, The Doctor wrote: >> >> > > I then tried again with a German exit, and had no problems. Since I > > don't speak German very well, I had to guess some, but it went thru > > with out any captcha.. > > > > Am wondering if it is only with a US exit or if it is happening on > > other country exits? > > > > Jon > > *** > > To unsubscribe, send an e-mail to majord...@torproject.org with > > unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ > > I have tried to creat gmail-accounts with Netherlands and German exits and have had problems: the Google required sms-verification. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
Jon wrote: > On Wed, Dec 29, 2010 at 10:38 AM, The Doctor wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> On 12/29/2010 08:38 AM, Orionjur Tor-admin wrote: >> >>> I heard that many times from differen people but I cannot creat any >>> gmail account without asking sms-verification about 2 or 3 years... And >>> tried do it many times >> For what it is worth, I just tried, and was unsuccessful in the attempt. >> I had to answer a CAPCHA (which is not a big deal) but was then >> confronted with a request to receive either a text message or a phone >> call. Sorry - that is a deal breaker. >> >> - -- >> > > I tried also, and had to do a captcha and this is what the next page said: > > Verify your account > You're almost done! We just need to verify your account before we can > create it. > > Account verification helps with: > Preventing spam: we try to verify that real people, not robots, are > creating accounts. > Recovering account access: we will use your information to verify your > identity if you ever lose access to your account. > Communication: we will use your information to notify you of important > changes to your account (for example, password changes from a new > location). > Unless you explicitly tell us to do so, your phone number will never > be sold or shared with other companies, and we will not use it for any > purpose other than during this verification step and for password > recovery and account security issues. In other words, you don't have > to worry about getting spam calls or text messages from us, ever. > > For more information, please read our frequently asked questions. > Verification Options > Text Message > Google will send a text message containing a verification code to > your mobile phone. > Voice Call > Google will make an automated voice call to your phone with a > verification code > > > I then tried again with a German exit, and had no problems. Since I > don't speak German very well, I had to guess some, but it went thru > with out any captcha.. > > Am wondering if it is only with a US exit or if it is happening on > other country exits? > > Jon > *** > To unsubscribe, send an e-mail to majord...@torproject.org with > unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ > Thanks for the information, I would know it. About a half of a year I tried to create a gmail account from my real ip but have had such result (asking for verification). After that I decided that it is a general rool of the Google to do it, but - with according to you information, my decision was wrong. It seems to me that it very difficult to find out why and when they require that. Thanks for that information again. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
On Wed, Dec 29, 2010 at 10:38 AM, The Doctor wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 12/29/2010 08:38 AM, Orionjur Tor-admin wrote: > >> I heard that many times from differen people but I cannot creat any >> gmail account without asking sms-verification about 2 or 3 years... And >> tried do it many times > > For what it is worth, I just tried, and was unsuccessful in the attempt. > I had to answer a CAPCHA (which is not a big deal) but was then > confronted with a request to receive either a text message or a phone > call. Sorry - that is a deal breaker. > > - -- > I tried also, and had to do a captcha and this is what the next page said: Verify your account You're almost done! We just need to verify your account before we can create it. Account verification helps with: Preventing spam: we try to verify that real people, not robots, are creating accounts. Recovering account access: we will use your information to verify your identity if you ever lose access to your account. Communication: we will use your information to notify you of important changes to your account (for example, password changes from a new location). Unless you explicitly tell us to do so, your phone number will never be sold or shared with other companies, and we will not use it for any purpose other than during this verification step and for password recovery and account security issues. In other words, you don't have to worry about getting spam calls or text messages from us, ever. For more information, please read our frequently asked questions. Verification Options Text Message Google will send a text message containing a verification code to your mobile phone. Voice Call Google will make an automated voice call to your phone with a verification code I then tried again with a German exit, and had no problems. Since I don't speak German very well, I had to guess some, but it went thru with out any captcha.. Am wondering if it is only with a US exit or if it is happening on other country exits? Jon *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
On Wed, Dec 29, 2010 at 11:34 AM, Moritz Bartl wrote: > Hi, > > The Tor Hidden Wiki lists a few other free email services offering HTTPS at: > http://kpvz7ki2v5agwt35.onion/wiki/index.php/Email > > -- > Moritz > *** > To unsubscribe, send an e-mail to majord...@torproject.org with > unsubscribe or-talk in the body. http://archives.seul.org/or/talk/ > I got this to work with out any problems also :) *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
Within last two hour, I tested these four exits, all failed to create new accounts. FF 3.6.1x, proxy set, dead common agent string. All form fields randomly generated for each exit. No recovery address supplied. 2bce68f1f3a84fb5986a09e6c2645f66ceb072d8 0ee6c3888c40a82a5bdc47d6e4d12edc41f4247f c1b7f0a32da660cba64ffc7c7ed71ed970aecb0e 498e83876367a3d833385562796ee8c7312f921f I'd be curious if anyone has success with these. You'll need to map these at minimum for the US. Sorry, Tor does not yet offer wildcard domain or CIDR block mapping, so you have to enter them all manually and maybe miss some that I didn't list: google.com mail.google.com clients1.google.com encrypted.google.com www.google.com > As in around 08:45 AM EST. I didn't look to see which exit, it > just worked, just a captcha required. Ok, cool. For me, there has never been a time in past few years I recall without the CAPTCHA on the signup form page. I want to see if I can instrument Tor's mapping function to emit host/IP to exit pairs as each is used or changes to syslog so they are not missed during testing various sites. > Gmail used to have the ability to stop bots from creating accounts > en masse. gmail doesn't have this ability any more. Oh, I thought that was called CAPTCHA :) Yes, I still see inbound spam from randomized accounts. Don't know if they're new. > When did you do it? I have some accounts created through such > method about 3 - 4 years ago, not later. And one of them they > required activate though sms after about 2 years of using!!! I have had ones that old and older. All single purpose accounts that I deleted when done with them. If I recall, all of them had something pop up about verification when Google became more strict. But I hit ignore and that was that. Doesn't mean it won't happen again. This thread is about people creating new accounts via Tor today, not legacy stuff. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
Bjarni Rúnar Einarsson wrote: > On Wed, Dec 29, 2010 at 7:37 PM, Orionjur Tor-admin < > tor-ad...@orionjurinform.com> wrote: > >> Aleksandr wrote: >>> On 12/29/2010 12:34 PM, Moritz Bartl wrote: Hi, The Tor Hidden Wiki lists a few other free email services offering >>> HTTPS at: http://kpvz7ki2v5agwt35.onion/wiki/index.php/Email >>> The link above returns nothing. >> It opens on my machine. It seems that it could be very useful information. >> > > Silly thing to say on this list, but if not on Tor, you can try > http://kpvz7ki2v5agwt35.tor2web.com/wiki/index.php/Email :-) > Thanks *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
Andrew Lewman wrote: > On Wed, 29 Dec 2010 14:02:34 -0500 > grarpamp wrote: > >>> We've generally suggested gmail because their bulk account creation >>> process was good. It seems this is not the case any more. >> What is this bulk account creation you speak of? > > Gmail used to have the ability to stop bots from creating accounts en > masse. gmail doesn't have this ability any more. > >>> This is false. I just created a gmail account via tor without >>> needing a phone number or any other information. >> Hmm, you mean "just", as in today? What exit were you using? >> Want to sell the account for bitcoins? Kidding :-) > > As in around 08:45 AM EST. I didn't look to see which exit, it just > worked, just a captcha required. > > I have tried to creat a gmail account some minutes ago and the Google requred sms-verification. I have used 'anonymizer6.torservers.net' with ip-address 174.36.199.203 located in the US. For creating account I have used an Iceweasel 3.0.6 with TB v. 1.2.5. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
On Wed, Dec 29, 2010 at 7:37 PM, Orionjur Tor-admin < tor-ad...@orionjurinform.com> wrote: > Aleksandr wrote: > > > > On 12/29/2010 12:34 PM, Moritz Bartl wrote: > >> Hi, > > > >> The Tor Hidden Wiki lists a few other free email services offering > > HTTPS at: > >> http://kpvz7ki2v5agwt35.onion/wiki/index.php/Email > > > > The link above returns nothing. > > It opens on my machine. It seems that it could be very useful information. > Silly thing to say on this list, but if not on Tor, you can try http://kpvz7ki2v5agwt35.tor2web.com/wiki/index.php/Email :-) -- Bjarni R. Einarsson The Beanstalks Project ehf. Making personal web-pages fly: http://pagekite.net/
Re: Tor & Email?
Aleksandr wrote: > > > On 12/29/2010 12:34 PM, Moritz Bartl wrote: >> Hi, > >> The Tor Hidden Wiki lists a few other free email services offering > HTTPS at: >> http://kpvz7ki2v5agwt35.onion/wiki/index.php/Email > > > The link above returns nothing. It opens on my machine. It seems that it could be very useful information. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
Praedor Atrebates wrote: > Interesting. I have a fully anonymous email from gmail (about 1 yr old) that > I created via tor and it required no call, no text message, nothing, just a > captcha. I have had several other accounts created at gmail previous to > this, also created via tor, and have not had any issue or > privacy/anonymity-violating issues. > > Have they changed something very recently? > > praedor > When did you do it? I have some accounts created through such method about 3 - 4 years ago, not later. And one of them they required activate though sms after about 2 years of using!!! *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
The Doctor wrote: > On 12/29/2010 08:38 AM, Orionjur Tor-admin wrote: > >> I heard that many times from differen people but I cannot creat any >> gmail account without asking sms-verification about 2 or 3 years... And >> tried do it many times > > For what it is worth, I just tried, and was unsuccessful in the attempt. > I had to answer a CAPCHA (which is not a big deal) but was then > confronted with a request to receive either a text message or a phone > call. Sorry - that is a deal breaker. > *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ Last years I always have such problem. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
On Wed, 29 Dec 2010 14:02:34 -0500 grarpamp wrote: > > We've generally suggested gmail because their bulk account creation > > process was good. It seems this is not the case any more. > > What is this bulk account creation you speak of? Gmail used to have the ability to stop bots from creating accounts en masse. gmail doesn't have this ability any more. > > This is false. I just created a gmail account via tor without > > needing a phone number or any other information. > > Hmm, you mean "just", as in today? What exit were you using? > Want to sell the account for bitcoins? Kidding :-) As in around 08:45 AM EST. I didn't look to see which exit, it just worked, just a captcha required. -- Andrew pgp 0x74ED336B *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
> We've generally suggested gmail because their bulk account creation > process was good. It seems this is not the case any more. What is this bulk account creation you speak of? The session leak occurs with the non-https intro/splash/welcome screen that appears right after new account creation. It's a minor risk though, just change the entry link they have on the splash page to https, change your password/sec question and log out and back in. > This is false. I just created a gmail account via tor without > needing a phone number or any other information. Hmm, you mean "just", as in today? What exit were you using? Want to sell the account for bitcoins? Kidding :-) I'm interested in solving and documenting the technical part of this issue... > I heard that many times from differen people but I cannot creat > any gmail account without asking sms-verification about 2 or 3 > years... And tried do it many times ... as I too have tried maybe once a month for the last year or so and have never been able to create a new account. If it's possible, it would certainly benefit Tor users to know how to do so reliably. I also have access to various residential dynamic pools where I can obtain a different IP/subnet at will. It has been equally long since I've been able to reliably create a new account via them as well. It would be cool to map *.google.com to an exit and when someone here has success, post the exit to see if others can test it sucessfully. I say map, because Tor often rotates exits during the creation process time, which can only confuse things worse. > anti-ddos/spam/too-many-creations-from-a-single-ip-address detector > is tripped for tor exit nodes and requires other information. Are you referring to google search? Yes, that service pops up a message stating that with a captcha. However, I've never seen any such message appear when attempting to sign up for gmail. > I just tried, and was unsuccessful in the attempt. I had to answer > a CAPCHA (which is not a big deal) but was then confronted with a > request to receive either a text message or a phone call. Sorry - > that is a deal breaker. That is exactly what occurs for me. Fill out the one page form, I select USA as the country in the drop box, hit submit, the next page is the phone verification, at which point I select "don't want to give my phone" or another appropriate/true choice, put a little complaint/suggestion in the comment box, hit submit... and give up. It is exactly the same whether or not I supply a 'recovery' email address, which by the way is the only optional item on the form. > I have a fully anonymous email from gmail (about 1 yr old) > I have had several other accounts created at gmail previous to this > Have they changed something very recently? About a year ago it seems. This is about the ability to create new accounts TODAY, without using invites or phone verification. > Why are you using GMail, then? It is a legacy application, undergoing research for migration :) And simply having one is still useful to play with Google's other services in an integrated fashion. > The link above returns nothing. Works for me since five minutes, try kicking your Tor. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/29/2010 12:34 PM, Moritz Bartl wrote: > Hi, > > The Tor Hidden Wiki lists a few other free email services offering HTTPS at: > http://kpvz7ki2v5agwt35.onion/wiki/index.php/Email > The link above returns nothing. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJNG4QKAAoJEF4giPX/zzyY7SYH/iU1UXxiYnwzYuMtWVlNX3b1 WixG9TG6zJx6esNzS4KVFHuUDrFTJJcU653UNq2oi5jIteDF7H+6TMLEj4fY1RCF C2VIedA1w6tlwqgrG8BniOIk9ZoHhkLrtym5c7d176bLbtOMycFifGgK974SNqu8 NZd/K85BippbXq1Dd4USxzmvtpLlXa0EBkYlNpBPq27UpnNE2uAGuQx4P/1ZiLnu KLDA63uVfte3I4UwyTLmHjfkIiJsfEA9EYaWPQ3tBDmu1iwKf3XfhFzRWKv2cyR2 4FzrUEsv3cBuVp1UkPHdIZj5qX2xRv4o9u+w034COWp27g5ac+Fhl5iPJsJlYAI= =70YT -END PGP SIGNATURE- *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
On Wed, 29 Dec 2010 03:42:00 -0500, grarpamp wrote: > >> The only recommended way to use email with Tor is to use web mail, > >> e.g. https connections to gmail. > > Keep in mind that google does not allow new accounts to be > created via Tor. Unless you are willing to give up your phone > number. Also they expose the GX session key and other cookies during > the signup to login phase, even if you carefully forced ssl urls, so your > minty new vanity named account is subject to immediate exit hijacking. > They also bastardize IMAP and mail purging, store and read your mail > for life, corroborate with the NSA and generally suck ass otherwise. > If any of these bother you, and for most purposes, you're better off > finding another mail provider :) Why are you using GMail, then? -- Nicolas Pouillard http://nicolaspouillard.fr *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
Hi, The Tor Hidden Wiki lists a few other free email services offering HTTPS at: http://kpvz7ki2v5agwt35.onion/wiki/index.php/Email -- Moritz *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/29/2010 08:38 AM, Orionjur Tor-admin wrote: > I heard that many times from differen people but I cannot creat any > gmail account without asking sms-verification about 2 or 3 years... And > tried do it many times For what it is worth, I just tried, and was unsuccessful in the attempt. I had to answer a CAPCHA (which is not a big deal) but was then confronted with a request to receive either a text message or a phone call. Sorry - that is a deal breaker. - -- The Doctor [412/724/301/703] PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1 WWW: http://drwho.virtadpt.net/ "He who has never despaired has no need to have lived." --Goethe -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk0bY/YACgkQO9j/K4B7F8FbxACaA+YIbmazkNtoxU1bvla7NACe WEcAoK7bHDEygShtt/8JXVoj7LnfCHGJ =Xhio -END PGP SIGNATURE- *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
and...@torproject.org wrote: > On Wed, Dec 29, 2010 at 03:42:00AM -0500, grarp...@gmail.com wrote 0.9K bytes > in 15 lines about: > : Keep in mind that google does not allow new accounts to be > : created via Tor. Unless you are willing to give up your phone > > This is false. I just created a gmail account via tor without needing a > phone number or any other information. > > Frequently, google's > anti-ddos/spam/too-many-creations-from-a-single-ip-address detector > is tripped for tor exit nodes and requires other information. > > We've generally suggested gmail because their bulk account creation > process was good. It seems this is not the case any more. > I heard that many times from differen people but I cannot creat any gmail account without asking sms-verification about 2 or 3 years... And tried do it many times *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
On Wed, Dec 29, 2010 at 03:42:00AM -0500, grarp...@gmail.com wrote 0.9K bytes in 15 lines about: : Keep in mind that google does not allow new accounts to be : created via Tor. Unless you are willing to give up your phone This is false. I just created a gmail account via tor without needing a phone number or any other information. Frequently, google's anti-ddos/spam/too-many-creations-from-a-single-ip-address detector is tripped for tor exit nodes and requires other information. We've generally suggested gmail because their bulk account creation process was good. It seems this is not the case any more. -- Andrew pgp key: 0x74ED336B *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
On Wed, Dec 29, 2010 at 10:32:41AM +, Orionjur Tor-admin wrote: > As I know sometimes ago there were plans of the Tor developers to make > TB for Thunderbird, am I wrong? It's still in the plans, but we don't have anybody to work on it currently, so don't hold your breath. Perhaps some nice person here will volunteer? The challenge is that it takes a special kind of person to be thorough enough to look at all the ways that Thunderbird can screw up. See https://www.torproject.org/torbutton/design/ for a good start on the web end of things. But Mike Perry is constantly several Firefox versions behind, even then. So I am not particularly optimistic about providing good support for another Mozilla product too. :) --Roger *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
Roger Dingledine wrote: > On Tue, Dec 28, 2010 at 08:57:24PM -0500, Alek wrote: >> I'm curious- in what way can Tor be used for emailing? When someone is >> connected to the Tor network is there email routed along the Tor network >> too? Or, does it go through their the normal connection with their ISP? > > The only recommended way to use email with Tor is to use web mail, > e.g. https connections to gmail. > > Periodically people ask about using Thunderbird or the like. The problem > is that client-side applications that compose and deliver email could > leave identifying features in the mail headers they generate, or in the > application-level data while interacting with remote mail servers. Nobody > has investigated what would be needed to write a Torbutton equivalent > for Thunderbird. > > To answer what might be your more immediate question, you may be > confused about Tor when you say "when someone is connected to the Tor > network". Only applications that have been specifically configured > to use Tor will send their traffic over Tor. See point 'a' at > https://www.torproject.org/download/download.html.en#warning > > --Roger > > *** > To unsubscribe, send an e-mail to majord...@torproject.org with > unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ > Hello Roger, As I know sometimes ago there were plans of the Tor developers to make TB for Thunderbird, am I wrong? *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
>> The only recommended way to use email with Tor is to use web mail, >> e.g. https connections to gmail. Keep in mind that google does not allow new accounts to be created via Tor. Unless you are willing to give up your phone number. Also they expose the GX session key and other cookies during the signup to login phase, even if you carefully forced ssl urls, so your minty new vanity named account is subject to immediate exit hijacking. They also bastardize IMAP and mail purging, store and read your mail for life, corroborate with the NSA and generally suck ass otherwise. If any of these bother you, and for most purposes, you're better off finding another mail provider :) *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Tor & Email?
On 12/29/2010 12:38 AM, Roger Dingledine wrote: > On Tue, Dec 28, 2010 at 08:57:24PM -0500, Alek wrote: >> I'm curious- in what way can Tor be used for emailing? When someone is >> connected to the Tor network is there email routed along the Tor network >> too? Or, does it go through their the normal connection with their ISP? > The only recommended way to use email with Tor is to use web mail, > e.g. https connections to gmail. > > Periodically people ask about using Thunderbird or the like. The problem > is that client-side applications that compose and deliver email could > leave identifying features in the mail headers they generate, or in the > application-level data while interacting with remote mail servers. Nobody > has investigated what would be needed to write a Torbutton equivalent > for Thunderbird. > > To answer what might be your more immediate question, you may be > confused about Tor when you say "when someone is connected to the Tor > network". Only applications that have been specifically configured > to use Tor will send their traffic over Tor. See point 'a' at > https://www.torproject.org/download/download.html.en#warning > > --Roger > > *** > To unsubscribe, send an e-mail to majord...@torproject.org with > unsubscribe or-talkin the body. http://archives.seul.org/or/talk/ Thank youyou answered my question. signature.asc Description: OpenPGP digital signature
Re: Tor & Email?
On Tue, Dec 28, 2010 at 08:57:24PM -0500, Alek wrote: > I'm curious- in what way can Tor be used for emailing? When someone is > connected to the Tor network is there email routed along the Tor network > too? Or, does it go through their the normal connection with their ISP? The only recommended way to use email with Tor is to use web mail, e.g. https connections to gmail. Periodically people ask about using Thunderbird or the like. The problem is that client-side applications that compose and deliver email could leave identifying features in the mail headers they generate, or in the application-level data while interacting with remote mail servers. Nobody has investigated what would be needed to write a Torbutton equivalent for Thunderbird. To answer what might be your more immediate question, you may be confused about Tor when you say "when someone is connected to the Tor network". Only applications that have been specifically configured to use Tor will send their traffic over Tor. See point 'a' at https://www.torproject.org/download/download.html.en#warning --Roger *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
