[Freedombox-discuss] Email Encryption Basics

2012-11-09 Thread Nick M . Daly
I've recently had a few questions on encrypting emails and figured that sending this to the list might help. Step 1: Use email safely (don't leak your password and be wary of leaving server-side copies). Step 2: Meet and trust people who you're going to exchange messages with. Un

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-15 Thread Jonathan Wilkes
ons who aren't eveninto technology nor know about privacy issues, that's the implicit story. -Jonathan - Original Message - > From: Nick M. Daly > To: freedombox-discuss@lists.alioth.debian.org > Cc: > Sent: Friday, November 9, 2012 11:47 PM > Subject: [Fre

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-15 Thread Sandy Harris
Jonathan Wilkes wrote: > Apropos of the ongoing Petraeus media circus-- a box with a simple setup > to provide a basic email server would be very desirable For complete email security, you need PGP for end-to-end encryption. That needs to be done on the end systems, not on the Box. There are th

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-15 Thread Sandy Harris
On Thu, Nov 15, 2012 at 3:57 PM, Jonathan Wilkes wrote: > Apropos of the ongoing Petraeus media circus-- ... EFF have an interesting analysis: https://www.eff.org/deeplinks/2012/11/when-will-our-email-betray-us-email-privacy-primer-light-petraeus-saga ___

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-15 Thread Eugen Leitl
On Thu, Nov 15, 2012 at 04:48:50PM -0500, Sandy Harris wrote: > The Box should, I think, support a webmail interface because > that is what many people are used to. That should use SSL > encryption by default; this protects mail on the wire or in the > air between the server and your desktop or la

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-16 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/11/12 07:35, Eugen Leitl wrote: > Most attempted delivery from dynamic user space will bounce, and > requiring smarthosts clashes both with the zero administration > requirement and adds an additional point of attack. > > There is no really good

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-16 Thread Nick M. Daly
Michael Rogers writes: > On 16/11/12 07:35, Eugen Leitl wrote: >> Most attempted delivery from dynamic user space will bounce, and >> requiring smarthosts clashes both with the zero administration >> requirement and adds an additional point of attack. > > I think this is way too pessimistic. Yes,

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-16 Thread Eugen Leitl
On Fri, Nov 16, 2012 at 07:04:44AM -0600, Nick M. Daly wrote: > For no reason I can explain, my box can send outgoing mail without issue > (I haven't purchased or defined an MX record or smarthost, IIRC). It Are you on residential broadband? Do you have a dynamic address pool? If still yes, then

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-16 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/11/12 13:44, Eugen Leitl wrote: >>> Alternatively, the FBX could act as a PGP proxy for an existing >>> email account: the FBX would encrypt email before sending it to >>> the existing > > This is a bad solution, as you will need an email accoun

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-16 Thread Elena ``of Valhalla''
On 2012-11-16 at 14:22:07 +, Michael Rogers wrote: > > Your IMAP server should be on your FBX. > Yes, in an ideal world we'd all run our own mail servers. In the real > world it's not possible to run a mail server on a home broadband > connection, actually, you *can* run an *IMAP* server at h

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-16 Thread Jonathan Wilkes
- Original Message - > From: Nick M. Daly > To: Michael Rogers ; Eugen Leitl > Cc: freedombox-discuss@lists.alioth.debian.org > Sent: Friday, November 16, 2012 8:04 AM > Subject: Re: [Freedombox-discuss] Email Encryption Basics > > Michael Rogers writes: >

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-16 Thread Jonathan Wilkes
- Original Message - > From: Elena ``of Valhalla'' > To: freedombox-discuss@lists.alioth.debian.org > Cc: > Sent: Friday, November 16, 2012 11:15 AM > Subject: Re: [Freedombox-discuss] Email Encryption Basics > > On 2012-11-16 at 14:22:07 +, Michae

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-17 Thread Russell Edwards
On 17/11/12 18:48, Jonathan Wilkes wrote: Anyway, I think there's a sea change occurring on how people look at the trade-off between convenience and privacy. Tonight on Real Time with Bill Maher, Bill asked the guests what the FBI is doing reading the emails of people involved in a sex scandal

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-17 Thread Russell Edwards
On 17/11/12 01:22, Michael Rogers wrote: In the real world it's not possible to run a mail server on a home broadband connection, Could have fooled me..! Works fine for me. My $0.02 is don't bite off more than we can chew. Get people's primary data storage off "The Cloud" first. Then worry a

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-17 Thread Jonathan Wilkes
- Original Message - > From: Russell Edwards > To: freedombox-discuss@lists.alioth.debian.org > Cc: > Sent: Saturday, November 17, 2012 5:48 AM > Subject: Re: [Freedombox-discuss] Email Encryption Basics > > On 17/11/12 01:22, Michael Rogers wrote: >>

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-19 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/11/12 10:48, Russell Edwards wrote: > On 17/11/12 01:22, Michael Rogers wrote: >> In the real world it's not possible to run a mail server on a >> home broadband connection, > > Could have fooled me..! > > Works fine for me. Sorry, I should ha

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-19 Thread Jonathan Wilkes
- Original Message - > From: Michael Rogers > To: Russell Edwards > Cc: freedombox-discuss@lists.alioth.debian.org > Sent: Monday, November 19, 2012 12:28 PM > Subject: Re: [Freedombox-discuss] Email Encryption Basics > > -BEGIN PGP SIGNED MESSAGE- > Has

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-19 Thread Michael Rogers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 19/11/12 21:01, Jonathan Wilkes wrote: >> But my mental model of the FBX is a mass-market "privacy >> appliance". I get the impression no two people on this list have >> identical mental models of the FBX, and I'm not saying that's a >> bad thing.

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-19 Thread Jonathan Wilkes
- Original Message - > From: Michael Rogers > To: Jonathan Wilkes > Cc: Russell Edwards ; > "freedombox-discuss@lists.alioth.debian.org" > > Sent: Monday, November 19, 2012 6:34 PM > Subject: Re: [Freedombox-discuss] Email Encryption Basics > [.

Re: [Freedombox-discuss] Email Encryption Basics

2012-11-20 Thread Eugen Leitl
On Mon, Nov 19, 2012 at 05:19:34PM -0800, Jonathan Wilkes wrote: > I'm not sure how to get from a to b, where a is no FBX and b is FBX as > described in those sentences I quoted from the website.  If it's the > case that (spam-free, non-blacklisted) email in its current incarnation > can be done w