Recent comments in /f/Privacy

smooth_jazz wrote

Although some points are worded a bit... extreme, they make sense.
Protonmail DOES redirect you to their clearnet site for signing up, but this doesn't mean they are compromised.
And as far as E2EE is concerned, this depends on your threat level. You could use a different email provider (or self-host) and manually encrypt your messages. Or you could trust somebody to do this for you. And as far as a normal user is concerned, protonmail is a good start. Other claims in the article do seem far-fetched.

3

Rambler OP wrote

I also have a paranoid.mail address, but it's unclear to me if they're still "around". Although I was able to get the clearnet mailservers working fine, and I love the pop3 access, I wanted to use it over TOR and no matter what, with the information provided, I couldn't get Thunderbird to accept the TOR mailservers.

1

Rambler OP wrote

The next step is rather to have personal end-to-end, peer-to-peer communication systems.

Which some platforms have, it seems, but then you're stuck communicating to only those within that platform. I believe ZeroNet has something similar, where you could technically email me at nxm9c2wjbjlhjsrc@zeroid.bit but I never check it because no one ever uses it. You can also mail me on I2P's network as well, at (I forget) @mail.i2p, but once again, it's network specific.

Whoever can get the major networks and up-and-comers to agree upon some sort of standardized P2P E2E encrypted mail system that can be accessed from anywhere, then you'd have a winner.

But I doubt that's possible with all the various networks working hard to implement their own vision.

3

Rambler OP wrote

This article reads like an NSA operation to convince you to move away from a Swiss based provider (where they can't intercept) to a provider that is based in Germany (a 14-eyes country) or similar jurisdiction where US intel has easy access.

It very well could be, and it's hard telling in this day and age. I just stumbled across the article and thought it was worth sharing and discussing.

For what it's worth, I use protonmail myself.

2

RichardButte wrote

E-mail is outdated, the steps required to get truly safe e-mailing is beyond regular users reach and trusting third parties to handle the technical security isn't the right way forward. Look at Tutanota and the recent forced backdooring.

The next step is rather to have personal end-to-end, peer-to-peer communication systems.

3

smooth_jazz wrote

Actually, any email provider+PGP is good, but incoming mail may not always be encrypted, and trusting the provider with your keys is a REALLY bad idea. Paranoid does this without storing your private keys like protonmail. They have a no-webmail policy (you'll need a mail client) and encrypt all incoming mail (if unencrypted) with your public key which is the only key they store.

3

z3d wrote

If you're looking for an end-to-end encrypted chat app that also handles file transfers and doesn't rely on intermediate servers, you might want to look at I2PChat (formerly I2PMessenger).

It's had an interface overhaul recently and is straightforward to use. No signup required, no metadata to log, a settings folder that's easy to migrate, and cross-platform.

To compile, you'll need to have Qt 5.14 or later installed; the source code is available at: https://vituperative.github.io/i2pchat/

If you're on Windows, a pre-built CI binary is available from: https://ci.appveyor.com/project/wipedlifepotato/i2pchat/build/artifacts

2

RichardButte wrote

I want to love Briar so much, but as long as it doesn't support backup or exporting user data you're stuck on your current device.

There is literally no way of migrating devices without manually sending new contact info to everyone, you WILL lose everything in your profile and if you lose your phone?

"For journalists who needs security" - Well, I guess you just have to contact your secret sources directly again.

Yes, Briar is currently being worked on. But not the export/migration/backup system, the original issue ticked is FIVE YEARS OLD! Because of that I'm actively warning everybody about this critical issue.

For what it's worth, Briar GTK has direct messaging working on linux desktops.

2