Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-11-11 Thread Sunil Mohan Adapa
On Monday 10 November 2014 04:42 PM, Jonas Smedegaard wrote: Quoting Jonathan Wilkes (2014-11-10 00:42:12) [...] Currently all I've read is that the project should glue together pre-existing pieces of software, rather than designing or developing software specifically for the project. (Or

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-11-10 Thread Jonas Smedegaard
Quoting Jonathan Wilkes (2014-11-10 00:42:12) There needs to be a more rigorous-- or at least explicit-- set of guidelines for what software may get included in Freedombox. That sounds sensible to me. Currently all I've read is that the project should glue together pre-existing pieces

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-11-09 Thread Petter Reinholdtsen
[Petter Reinholdtsen] These ideas about SMTorP and Cables sound great, but I am wondering what is needed to get these options into the FreedomBox. Can any of you who know these approaches best tell us what needs to be done? Are Cables, SMTorP and Mailpile compatible? Can they send email to

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-11-09 Thread Jonathan Wilkes
There needs to be a more rigorous-- or at least explicit-- set of guidelines for what software may get included in Freedombox. Currently all I've read is that the project should glue together pre-existing pieces of software, rather than designing or developing software specifically for the

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-11-05 Thread Sam Hartman
What you propose with exim and hidden addresses ought to be relatively simple to set up. You'd want to take a careful look at your DNS traffic to make sure you're not leaking things there both at the email client layer and at the exim layer. In particular, take a look at what your email client

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-20 Thread Bjarni Runar Einarsson
Hi Jonathan! Jonathan Wilkes jancs...@yahoo.com wrote: Does your design include perfect forward secrecy for the pairs communicating over SMTorP? We recommend using TLS over the Tor circuit, and will probably recommend using a cipher which provides PFS. However, encryption of the messages

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-20 Thread Jonathan Wilkes
Bjarni, What options are you exploring for funding? Unfortunately, I do not have any suggestions. -Jonathan On Monday, October 20, 2014 3:54 AM, Bjarni Runar Einarsson b...@pagekite.net wrote: Hi Jonathan! Jonathan Wilkes jancs...@yahoo.com wrote: Does your design include perfect

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-19 Thread Bjarni Runar Einarsson
Hi Jonathan! Jonathan Wilkes jancs...@yahoo.com wrote: Hi Bjarni,What is the novel part of your SMTorP design that allows users of insecure email to gradually, opportunistically improve their security wrt hiding their metadata? The incremental improvements are not part of the design of

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-19 Thread Jonathan Wilkes
Hi Bjarni, Thanks for the response. Does your design include perfect forward secrecy for the pairs communicating over SMTorP? Also, what is your plan to sustainably fund the GUI work, user studies, and the work on professional documentation? (I.e., those aspects which tend to get little to

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-18 Thread Bjarni Runar Einarsson
Hi guys! Just noticed this thread. I wanted to just chime in and support this idea. I think there is immense value to using normal e-mail over Tor and the e-mail client I am working on (Mailpile) is looking to support this sort of thing out of the box, including appropriate UI feedback so users

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-18 Thread Jonathan Wilkes
Hi Bjarni,What is the novel part of your SMTorP design that allows users of insecure email to gradually, opportunistically improve their security wrt hiding their metadata? It looks to me like your users would need to exchange onion addys out-of-band, or else take the risk that comes with

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-14 Thread Jens Thiele
Petter Reinholdtsen p...@hungry.com writes: Btw, I also came across URL: http://johannes.sipsolutions.net/Projects/exim-tor-hidden-mail when searching for people with similar ideas. The recipe there definitely look like something we could set up on the Freedombox. i was looking for smtp

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-13 Thread Petter Reinholdtsen
[Jonathan Wilkes] Hi Petter,I'm not sure I understand what you mean. Well, I am not sure I understand what you mean, so that make us a team, I guess. :) Cables includes within it the subset of features you need for fbx - fbx communication resistant to meta-data snooping. What does your

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-12 Thread Petter Reinholdtsen
[Jonathan Wilkes] Hi Petter,You should look at something like Cables in Linux Liberte. Are you talking about URL: http://dee.su/liberte ? But the only reason Cables theoretically* works is that everything is delivered over Tor, and it typically runs on a machine where Tor is being leveraged

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-12 Thread Jonathan Wilkes
Hi Petter,I'm not sure I understand what you mean. Cables includes within it the subset of features you need for fbx - fbx communication resistant to meta-data snooping. What does your proposed system do that Cables does not? Also, I didn't know it was still under active development. I

[Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-11 Thread Petter Reinholdtsen
Hi. I got this idea for how to set up a system to exchange emails between freedobox boxes without having to develop much ourself. Is this already done by someone else? Anyone here know enough about the involved systems to make a proof of concept quickly? The idea is based on the fact that a

Re: [Freedombox-discuss] Idea for cross freedombox email system not leaking metadata

2014-10-11 Thread Jonathan Wilkes
Hi Petter,You should look at something like Cables in Linux Liberte. But the only reason Cables theoretically* works is that everything is delivered over Tor, and it typically runs on a machine where Tor is being leveraged for everything. That at least gives the user some protection if the