That's cool. Thanks for replying. Yeah I saw the randomize retries which is nice. The crypto appears to check out (maybe with a few points of improvements).
My initial reaction is that crypto is at least following some kind of standards, but transmission of those CMS messages via GET requests to a custom HTTP service running on each box. Also, although it is pretty obscured from accidental discovery thanks to Tor, this service spits out identifying information. Lastly, there seems like a likely scenario that a third party could at least verify that a message was exchange between two accounts. Is this a misunderstanding on my part? @ On Tue, Nov 19, 2013 at 4:24 AM, Jeremy French <[email protected]>wrote: > Yes I have looked into it. It can be a bit tricky to set up. But seems to > work well enough once it is set up. > > P2P email over TOR is actually quite a neat solution, as you do away with > any central weak spot. Cables also randomizes the times that it retries to > send to try and cut down on leaks due to timing information. > > I have a how to on setting up on Arch Linux here > http://msntfh.tumblr.com/post/66871943930/setting-up-cables-on-arch > > Jeremy > > > On Sat, Nov 16, 2013 at 11:22:21PM -0500, AntiTree wrote: > > I'm a bit late to the party, but I was taking a look at the Cables > project > > form the Liberte Linux distro. Here is the project page: > > https://github.com/mkdesu/cables > > > > The short explanation is that it attempt to implement a PKCS#7 AKA CMS. [ > > http://en.wikipedia.org/wiki/Cryptographic_Message_Syntax] > > > > This is an interesting project that attempts to leverage Tor hidden > > services to share communications and X.509 certificates to verify > identity. > > > > I'm wondering if anyone has looked into this on the list. > > > > More info: http://dee.su/cables > > > > AntiTree > > -- > > tor-talk mailing list - [email protected] > > To unsubscribe or change other settings go to > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk > -- > tor-talk mailing list - [email protected] > To unsubscribe or change other settings go to > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk > -- tor-talk mailing list - [email protected] To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
