ThunderBird + Enigmail + OnionMail + TOR

TORMailer.sh

########################################################
## ThunderBird + Enigmail + OnionMail Instructions :) ##
##                  By: hellresistor                  ##
##                  Date: 2020-04-16                  ##
########################################################
# Tested on: Debian/Whonix
# Donate Bitcoin: 13Gr4JiWQBnhCs6AdUNapdfHVu3tG9G6zL
# Donate Bitcanna: B73RRFVtndfPRNSgSQg34yqz4e9eWyKRSv

1- Get your mail from https://onionmail.info
   or choose a onion mirror http://onionmail.info/directory.html
   AND SAVE DATA!!!!!! ;) Use keepPass .. or what you want..
   
$ sudo apt install thunderbird enigmail

3- Hard PART :)

On this example I will use: 
username: "usermail"
OnionDomain: "wc2eyfmw7wrwomf4.onion"  (choosed before from list)

Open Thunderbird and Fill the Setup: 
 - [email protected] 
 - NO PASSWORD 
 - UNCHECK Remember password 
 - Manual Config
  -- POP3: wc2eyfmw7wrwomf4.onion Port: 110 SSL: STARTTLS Auth: Normal Password
  -- SMTP: wc2eyfmw7wrwomf4.onion Port: 25 SSL: STARTTLS Auth: Normal Password
  -- Username: usermail
 
 DONE!
 
 You need wait until GnuPG has been detected ;) (should do in seconds)

Go to Email Settings 
 - ServerSettings
  -- Uncheck/Check This configs;
   --- Uncheck New Messages startup
 	 --- Uncheck New messages every ...seconds
	 --- Uncheck Automatic download messages
	 --- Uncheck Leave messages on server
   --- Check Empty Trash on Exit
  
 - Copies & Folders 
   -- Modify all SelectBoxes From "[email protected]" TO "LocalFolders"
   -- CHECK "show confirmation dialog when messages are saved"

DONE!

Need Enable Menu Toolbar and GoTo
 - Enigmail - Key Management - Generate - New Key Pair
  -- Choose account "[email protected]"
  -- Set a STRONG PASSWORD (Use KeepPass Generated password ;) )
  Generate Key !
  Generate Certificate! 
  Put Your STRONG Password to validate!!!!!!!
  Revoke Certified Created!!! (Set a EasyNameToRevokeCert.REV.asc ex: "[email protected]" )
  OK!!
  -- Right-Click on Account and click "Manage User IDs"
   --- Click Add
    ---- Name: usermail Email: [email protected]
   --- Set [email protected] AS PRIMARY
   --- OK!
  -- Right-Click on Account and click "Upload Public Keys to Keyserver"
  -- Open Account (Double Click) and COPY FINGERPRINT to FUTURE
 - OK/Close
 
Lets Encrypt the Revocation Certificate
$ mkdir -p storage/gpg-revoke
$ gpg --cipher-algo AES256 --symmetric [email protected]
$ mv *.gpg storage/gpg-revoke 

## Decrypt RevokeCert IF someday was Needed!!
#$ gpg -o [email protected] -d \ ~/storage/gpg-revoke/[email protected]

Back on Thunderbird MenuToolbar 
- Preferences 
 -- Advanced
  --- General 
   ---- Config Editor
    ----- Search to network.dns.blockDotOnion set TRUE
   ---- UNCHECK "Global Search and Indexer" 
   ---- Return Receipts 
    ----- CHECK "Never send a return receipt"
  --- Network & Disk Space 
   ---- Connection Setting 
    ----- Manual Proxy on ALL protocols: 127.0.0.1:9150
    ----- Check "Proxy DNS when using SOCKS v5" 
  --- Data Choices 
   ---- UNCHECK "Enable Crash Reporter"
 -- Privacy
  --- UNCHECK "Remember websites and links ..."

Menu Toolbar - Edit 
- Account Settings:
  -- OpenPGP Security 
   --- CHECK "Encrypt messages default" -
   --- UNCHECK "PGP/MIME by default"
   --- CHECK "Sign encrpted messages"
   --- Enigmail Preferences Button
    ---- Sending
	 ----- CHECK "Manually configure encrypt settings"
	 ----- "Confirm before sending" ALWAYS
	 OK!
   
- Signature TEXT:
    GPG Public Key: 0x65fd7a3633615f2c   ## (THIS ARE THE LAST 4 blocks of your Fingerprint in low-case after the '0x' string )
    Fingerprint: SB51 BA33 4CFB B6EE 1FEB 6B17 65FD 7A36 3361 5F2C     ## THIS ITS YOUR FINGERPRINT Copied before

OK! OK! OK!

WEELL IF ALL ALRIGHT Will be asked to you for POP3 Password, and you will Get the email to Verify your Public Key :))
Try send an encrypted mail ;) YOU ARE DONE!!!

PS: Of course you need GET Public Key from your friend and Share yours key to your friend :)

#####################
####  E X T R A  ####
#####################
Lets Search a Fingerprint. We will use A Public GPG Fingerprint from AnonGuide Man!! Respect that guy(s)!!!

Menu Toolbar - Enigmail - Key Management
- Search Keys
 -- 81934E7B83E89CFD8C25F3D67FBD040886EC5FE0 
 -- if one server not work try other.. one of them will work!!!
Will get a "OK" Return message , Should verify the fingerprint

OK! Try send him an email! Dont forget dont encrypt your GPG public key, To make possible AnonMan Decrypt your message ;)

CyA