Created
August 9, 2013 05:01
-
-
Save anonymous/6191300 to your computer and use it in GitHub Desktop.
post describing secure email like messaging
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Changing email providers does not solve the problem. Email is ***NOT usually*** encrypted at the protocol level. It is very likely better to just stick with Gmail sadly enough. | |
The only real resolution is to: | |
1. Never send sensitive information over traditional email without TNO PIE ([GnuPG](https://en.wikipedia.org/wiki/GNU_Privacy_Guard) or GPG). | |
This is extremely dangerous because: | |
1. Most services do not offer secure SMTP | |
1. Secure SMTP is vulnerable to downgrade attacks. | |
1. Use a secure, anonymous and decentralized alternative such as I2P-Bote or Bitmessage. | |
--- | |
###I2P-Bote | |
>I2P-Bote is a distributed e-mail application. It does not use the traditional e-mail concept of sending an e-mail to a server and retrieving it from a server. Instead, it uses a Kademlia Distributed Hash Table to store mails. One user can push a mail into the DHT, while another can request the e-mail from the DHT. And all the mails sent within the I2P-Bote network are automatically encrypted end-to-end. Furthermore, I2P-Bote offers a remailer function on top of I2P, for increased high-latency anonymity. | |
[[Clearnet](https://www.i2p2.de/techintro.html)] [[I2P link](http://www.i2p2.i2p/techintro.html)] | |
###Bitmessage | |
>Bitmessage is a P2P communications protocol used to send encrypted messages to another person or to many subscribers. It is decentralized and trustless, meaning that you need-not inherently trust any entities like root certificate authorities. It uses strong authentication which means that the sender of a message cannot be spoofed, and it aims to hide "non-content" data, like the sender and receiver of messages, from passive eavesdroppers like those running warrantless wiretapping programs. If Bitmessage is completely new to you, you may wish to start by reading the whitepaper. | |
[[Clearnet](https://bitmessage.org/wiki/Main_Page)] | |
###Links | |
|Item|Info| | |
|:--:|:--| | |
|OpenPGP|OpenPGP is the standard by which encrypted messages can be sent[[RFC 4880](https://tools.ietf.org/html/rfc4880)]| | |
|GnuPG|[[Windows](http://gpg4win.org/)][[Wikipedia](https://en.wikipedia.org/wiki/GNU_Privacy_Guard)] GnuPG or GPG is a peice of software which can be used to send encrypted messages to other people who use GPG or are compatible with the OpenPGP standard| | |
|Bitmessage|[[Official Page](https://bitmessage.org/wiki/Main_Page)][[Wikipedia](https://en.wikipedia.org/wiki/Bitmessage)]| | |
|I2P|I2P is like Tor, except its main focus is so called "hidden services"| | |
|I2P-Bote|I2P-Bote is an I2P plug-in which enables users to send and receive messages securely, anonymously and in a decentralized manner.| | |
###Terms | |
|Term|Define| | |
|:--:|:--| | |
|TNO|Trust no one, a system that that does not rely on trust for parties which are not directly involved. GPG could be defined as TNO, however SSL/TLS/PKI might not be defined as TNO| | |
|PIE|Pre-Internet encryption, encryption of data before it is broadcast.| |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment