Re: [tor-talk] HSTS forbids "Add an exception" (also, does request URI leak?)

2018-08-08 Thread Paul Syverson
You may be interested in our paper "HSTS Supports Targeted Surveillance" that we will present at FOCI next week https://www.usenix.org/conference/foci18/presentation/syverson Amongst other things, it discusses some of the issues raised in this thread. They will post the paper on Tuesday, but if

Re: [tor-talk] [tor-relays] freehaven question.

2018-08-08 Thread grarpamp
> The project called Free Haven never got finished, because of the hard > research questions described on the front page: > https://www.freehaven.net/ Where does (or should) the line or guidepath go on such projects in the space between say bulletproof (for all, most, or some use cases), and good

Re: [tor-talk] HSTS forbids "Add an exception" (also, does request URI leak?)

2018-08-08 Thread Kevin Flowers
Have you thought about running your own email server. -Original Message- From: tor-talk [mailto:tor-talk-boun...@lists.torproject.org] On Behalf Of Need Secure Mail Sent: Wednesday, August 8, 2018 12:28 PM To: tor-talk@lists.torproject.org Subject: Re: [tor-talk] HSTS forbids "Add an

Re: [tor-talk] HSTS forbids "Add an exception" (also, does request URI leak?)

2018-08-08 Thread Matthew Finkel
On Wed, Aug 08, 2018 at 04:27:33PM +, Need Secure Mail wrote: > On August 8, 2018 1:57 PM, Matthew Finkel wrote: > > > Right. This is the recommendation in the RFC [0]. It would be > > counter-productive if the webserver informed the browser that the > > website should only be loaded over a

Re: [tor-talk] Tor-friendly, Bitcoin-friendly paid e-mail

2018-08-08 Thread john doe
On 8/8/2018 6:22 PM, Need Secure Mail wrote: Grizzled long-time Tor user here. I seek basic, reliable POP/IMAP/SMTP service with an option to use my own domain (to avoid lock-in with a provider), from a well-established provider who will not likely disappear *and* will never block my account for

Re: [tor-talk] Tor-friendly, Bitcoin-friendly paid e-mail

2018-08-08 Thread grarpamp
gandi.net https://www.reddit.com/r/emailprivacy/ https://www.reddit.com/r/onions/ deepdotweb search: email tor onion Etc. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Tor-friendly, Bitcoin-friendly paid e-mail

2018-08-08 Thread grarpamp
vfemail.net Probably many others still on bitcoin.it and other wikis. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] HSTS forbids "Add an exception" (also, does request URI leak?)

2018-08-08 Thread Need Secure Mail
On August 8, 2018 1:57 PM, Matthew Finkel wrote: > Right. This is the recommendation in the RFC [0]. It would be > counter-productive if the webserver informed the browser that the > website should only be loaded over a secure connection, and then the > user was given the option of ignore that.

[tor-talk] Tor-friendly, Bitcoin-friendly paid e-mail

2018-08-08 Thread Need Secure Mail
Grizzled long-time Tor user here. I seek basic, reliable POP/IMAP/SMTP service with an option to use my own domain (to avoid lock-in with a provider), from a well-established provider who will not likely disappear *and* will never block my account for Tor logins, demand selfies with gov-id, etc. I

Re: [tor-talk] HSTS forbids "Add an exception" (also, does request URI leak?)

2018-08-08 Thread Matthew Finkel
On Wed, Aug 08, 2018 at 10:59:23AM +, Need Secure Mail wrote: > On August 7, 2018 11:14 PM, nusenu wrote: > >> did you notice the non-HSTS/HSTS distinction when trying to add an > >> exception? > > On August 8, 2018 1:51 AM, grarpamp wrote: > > If there is, would have to look closer, thx.

[tor-talk] HSTS forbids "Add an exception" (also, does request URI leak?)

2018-08-08 Thread Need Secure Mail
On August 7, 2018 11:14 PM, nusenu wrote: >> did you notice the non-HSTS/HSTS distinction when trying to add an exception? On August 8, 2018 1:51 AM, grarpamp wrote: > If there is, would have to look closer, thx. The following is to help searchers who rammed their heads into this problem, as I