Re: [tor-talk] Confidant Mail

2015-02-03 Thread Seth David Schoen
Mike Ingle writes: As far as HTTPS: The NSA has the ability to get into Amazon EC2 and mess with files too, no doubt. And they have a variety of compromised HTTPS CA certs they could use to MITM. If they wanted to do that they could, HTTPS or no. If they did it on a large scale, they would

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Mike Ingle
SSL: I get it, a lot of people think I should have SSL support on the website. I will look into it. Until then (and even after) check the sigs. Nuff said. Back to Confidant Mail: interesting project, kind of reminds me of BitMessage, though it seems to be more usable (by far). I looked at

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Andrew Roffey
michael ball: On *Tue Feb 3, Mike Ingle wrote:* I don't have HTTPS because there is nothing secret on the site, and because I don't place much trust in it i may be mistaken that it is kinda stupid not to use HTTPS on a website with downloads, as documents released by Ed Snowden show that

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Mike Ingle
That is an interesting point. Thinking this through in the game theory sense: Spooks' choice: 1: never mess with Tor downloads 2: mess with Tor downloads in rare cases of high value targets (where a selector like IP or cookie matches) 3: frequently mess with Tor downloads Effect of 1: they

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Andrew Roffey
Seth: On Tue, 03 Feb 2015 20:01:36 -0800, Andrew Roffey and...@roffey.org wrote: - there is a cost of obtaining HTTPS signatures. Not certain if the deal is still being offered, but for quite a while you could get a free TLS/SSL certificate good for one year when registering or

Re: [tor-talk] Confidant Mail

2015-02-03 Thread CJ
On 02/04/2015 06:19 AM, Seth wrote: On Tue, 03 Feb 2015 20:01:36 -0800, Andrew Roffey and...@roffey.org wrote: - there is a cost of obtaining HTTPS signatures. Not certain if the deal is still being offered, but for quite a while you could get a free TLS/SSL certificate good for one year

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Andrew Roffey
- there is a cost of obtaining HTTPS signatures. Oops, I meant HTTPS certificates, not signatures. Andrew -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Seth
On Tue, 03 Feb 2015 20:01:36 -0800, Andrew Roffey and...@roffey.org wrote: - there is a cost of obtaining HTTPS signatures. Not certain if the deal is still being offered, but for quite a while you could get a free TLS/SSL certificate good for one year when registering or transferring a

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Seth David Schoen
Andrew Roffey writes: michael ball: On *Tue Feb 3, Mike Ingle wrote:* I don't have HTTPS because there is nothing secret on the site, and because I don't place much trust in it i may be mistaken that it is kinda stupid not to use HTTPS on a website with downloads, as documents

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Mike Ingle
Non-www A record is added, and should show up soon. As far as HTTPS: The NSA has the ability to get into Amazon EC2 and mess with files too, no doubt. And they have a variety of compromised HTTPS CA certs they could use to MITM. If they wanted to do that they could, HTTPS or no. If they did it

Re: [tor-talk] VPN/TOR Router

2015-02-03 Thread Dave Warren
On 2015-02-02 11:06, Seth David Schoen wrote: spencer...@openmailbox.org writes: Hey :) I have been looking at a physical product by Cryptographi called the 'SnoopSafe Encrypted VPN/TOR Router'[0]. Does this work? Is this safe? [0] http://cryptographi.com/products/snoopsafe There have

Re: [tor-talk] New Tor-based private mail system: Confidant Mail

2015-02-03 Thread Kevin
On 2/2/2015 9:57 PM, Mike Ingle wrote: Confidant Mail is a new cryptographic email system based on GPG and TLS 1.2 with ephemeral keys. It has built-in support for Tor hidden service anonymity. You can send and receive files of unlimited length (4GB) using BitTorrent-like blocking, and people

Re: [tor-talk] Tor - VPN Clarification

2015-02-03 Thread Alfredo Palhares
VPN - Tor VPN connection to Tor == Tor connection through VPN getting your anonymity (Tor) more privately (VPN) easy setup; VMs not needed; firewall prudent; use PayPal for VPN safe with Tor browser; easy to fail with other apps I use VPN - Tor if the the end point is outside in

Re: [tor-talk] ISP CenturyLink Blocking Tor?

2015-02-03 Thread nathaniel
I waited and switched my laptop back to Debian Linux from Windows 8.1 and build my WiFi Driver from source. (it was a Microsoft Driver for the Edimax Nano Wifi) (the source was from edimax) and afterwards I was able to connect to Tor without crashing the entire WiFi Network. I wonder if

Re: [tor-talk] New Tor-based private mail system: Confidant Mail

2015-02-03 Thread Kevin
On 2/3/2015 12:33 PM, krishna e bera wrote: On 15-02-02 09:57 PM, Mike Ingle wrote: http://www.confidantmail.org Mike Ingle m...@confidantmail.org d2b89e6f95e72e26e0c917d02d1847dfecfcd0c2 I am curious why someone delivering security and privacy software does not have HTTPS on their webserver.

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Mike Ingle
On 2/3/2015 10:31 AM, Kevin wrote: On 2/3/2015 12:33 PM, krishna e bera wrote: On 15-02-02 09:57 PM, Mike Ingle wrote: http://www.confidantmail.org Mike Ingle m...@confidantmail.org d2b89e6f95e72e26e0c917d02d1847dfecfcd0c2 I am curious why someone delivering security and privacy software does

Re: [tor-talk] How to make TBB useable as system Tor, as Tor, Vidalia, pluggable transports system level replacement?

2015-02-03 Thread l.m
Patrick Schleizer wrote: Being able to use the tor-launcher graphical user interface is what this proposal is for. You still can. Tor launcher is an extension for firefox. It's not the same as Vidalia. You would still need to launch the tor process separately for system use. You could use Tor

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Zenaan Harkness
On 2/4/15, Mike Ingle m...@confidantmail.org wrote: On 2/3/2015 10:31 AM, Kevin wrote: On 2/3/2015 12:33 PM, krishna e bera wrote: On 15-02-02 09:57 PM, Mike Ingle wrote: http://www.confidantmail.org Mike Ingle m...@confidantmail.org d2b89e6f95e72e26e0c917d02d1847dfecfcd0c2 I am curious why

[tor-talk] Checksum Post

2015-02-03 Thread Thomas White
I am pasting the following PGP signed message so a wide and verifiable copy of it is available from several sources, so if the time must come for it to be verified then it can be done. At this moment I can't divulge what this is about other than Hidden Services. Please don't ask me to expand

Re: [tor-talk] Tor - VPN Clarification

2015-02-03 Thread Mirimir
On 02/03/2015 04:59 AM, Alfredo Palhares wrote: VPN - Tor VPN connection to Tor == Tor connection through VPN getting your anonymity (Tor) more privately (VPN) easy setup; VMs not needed; firewall prudent; use PayPal for VPN safe with Tor browser; easy to fail with other apps I

Re: [tor-talk] Confidant Mail

2015-02-03 Thread Kevin
On 2/3/2015 3:56 PM, Zenaan Harkness wrote: On 2/4/15, Mike Ingle m...@confidantmail.org wrote: On 2/3/2015 10:31 AM, Kevin wrote: On 2/3/2015 12:33 PM, krishna e bera wrote: On 15-02-02 09:57 PM, Mike Ingle wrote: http://www.confidantmail.org Mike Ingle m...@confidantmail.org

Re: [tor-talk] Report: Past, Present and Future of Tor Hidden Services

2015-02-03 Thread when2plus2is5
On 2015-02-02 04:15, Konstantin Müller wrote: I hope the report will be interesting to some of you! It sure is. Thanks! -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

[tor-talk] Confidant Mail

2015-02-03 Thread michael ball
On *Tue Feb 3, Mike Ingle wrote:* I don't have HTTPS because there is nothing secret on the site, and because I don't place much trust in it i may be mistaken that it is kinda stupid not to use HTTPS on a website with downloads, as documents released by Ed Snowden show that the NSA has the