LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   setting up email (https://www.linuxquestions.org/questions/linux-newbie-8/setting-up-email-4175593316/)

Higgsboson 11-11-2016 01:19 PM

Quote:

Originally Posted by Emerson (Post 5629444)
Icedove is an email client. All you do on the net can be eavesdropped on.

Yes, but this isn't very encouraging is it?
If Linux distros are secure, then they're completely useless if email is not secure as well.

I can't understand the point behind debian if email is compromised.
They offer Thunderbird/Icedove which is an email client and I think the email server is firefox.
I think this may be the most secure free option. But Wikipedia seems to be saying firefox is losing money on Thunderbird and so the free email service may end in the future.

I wonder if we can have a view where we can believe we can't be eavesdropped so easily.

Higgsboson 11-11-2016 01:26 PM

Quote:

Originally Posted by bimboleum (Post 5629445)
Before anything else you will need your own domain name and a static IP address from your ISP to be registered against that name.

This is very helpful. It seems like I'm creating my own website for secure email.
In which case, email security comes at a cost of price and effort. Quite unbelievable really. Good to see you've covered your back though! :)

Higgsboson 11-11-2016 01:29 PM

Quote:

Originally Posted by ardvark71 (Post 5629455)
Hi...

I've been trying to find a nice tutorial on how to use a POP3 client, whether Icedove or in general but, unfortunately, I'm only able to find information on setting one up. :(

Regards...

Interesting isn't it? There's nothing out there about secure email.
So that's how mass surveillance and Prism works. It's through free webmail services - yahoo, gmail, and hotmail.
Think about it - who doesn't have an account?

szboardstretcher 11-11-2016 01:32 PM

Protonmail @ https://protonmail.com/

Written by MIT and CERN alumni.

Emerson 11-11-2016 01:37 PM

Firefox is not an email server. I even do not know where you should start learning about this. I'm sure other members can post some links for you.

szboardstretcher 11-11-2016 01:45 PM

After reading through this thread, I'd like to say this.

Gmail and Yahoo are not secure. This is true.

Those of us who need secure messaging might use Gmail and Yahoo still but on top of it we encrypt our messages using GPG or PGP. We do not depend on Gmail or Yahoo or whoever to protect our communication. We do that ourselves. And we still don't need a private "secure" email server.

Higgsboson 11-11-2016 01:48 PM

Quote:

Originally Posted by szboardstretcher (Post 5629488)
Protonmail @ https://protonmail.com/

Written by MIT and CERN alumni.

I know this is cheeky, but do you have an account?

Higgsboson 11-11-2016 01:56 PM

Quote:

Originally Posted by szboardstretcher (Post 5629493)
After reading through this thread, I'd like to say this.

Gmail and Yahoo are not secure. This is true.

Those of us who need secure messaging might use Gmail and Yahoo still but on top of it we encrypt our messages using GPG or PGP. We do not depend on Gmail or Yahoo or whoever to protect our communication. We do that ourselves. And we still don't need a private "secure" email server.

I see. So we can use free webmail for our email.
However, we use an encryption method such as GPG or PGP and our emails are hidden from the outside and from the free webmail service we're using. Is that correct?

szboardstretcher 11-11-2016 01:57 PM

Yes I do,.. I have since 2014. A protonmail.ch address originally, but now its protonmail.com as well. The interface is nice, they have themes. I forward all my outlook/gmail accounts to it. I also have the GPG keys created for the addresses and I use GPG in all my communications that matter to me.

Your emails aren't hidden using GPG. They are just unreadable by anyone but the person who has the correct 4096 bit private key. And to crack the GPG key would take something like the length of the universe.

Hope this helps

Higgsboson 11-11-2016 02:10 PM

Quote:

Originally Posted by szboardstretcher (Post 5629498)
Yes I do,.. I have since 2014. A protonmail.ch address originally, but now its protonmail.com as well. The interface is nice, they have themes. I forward all my outlook/gmail accounts to it. I also have the GPG keys created for the addresses and I use GPG in all my communications that matter to me.

Your emails aren't hidden using GPG. They are just unreadable by anyone but the person who has the correct 4096 bit private key. And to crack the GPG key would take something like the length of the universe.

Hope this helps

Have you read about Protonmail on Wikipedia?
It is quite amusing :)

ardvark71 11-11-2016 02:44 PM

Quote:

Originally Posted by Higgsboson (Post 5629501)
Have you read about Protonmail on Wikipedia?
It is quite amusing :)

How could you not trust a mail provider whose main datacenter is under "under 1,000 meters of granite rock?" :D

Seriously though, I like what I'm seeing in terms of their approach and am thinking about opening an account, Lord willing. :)

Regards...

Higgsboson 11-11-2016 10:13 PM

Quote:

Originally Posted by ardvark71 (Post 5629524)
How could you not trust a mail provider whose main datacenter is under "under 1,000 meters of granite rock?" :D

Clearly, you understand.
God help us. We may not get secure email in the West, but we will get it in the Promised Land!
Brother Jesus - I hope you're watching.

Turbocapitalist 11-12-2016 04:11 AM

Quote:

Originally Posted by Higgsboson (Post 5629501)
Have you read about Protonmail on Wikipedia?
It is quite amusing :)

It is a useful webmail service but it is quite amusing that webmail of any stripe is being touted as either secure or securable. It is trivial to do layer 7 man-in-the-middle attacks on web mail in a lot of situations. However, the big one is that the way Protonmail is setup, you are relying on both their good will and lack of legal pressure. Even with MitM aside, with the Protonmail setup, it is their choice whether or not to read your mail even if they pretend to encrypt it. When they support IMAPS and SMTP, that will be a different matter.

A few years GMX used to offer some mail service but seems to have stopped. The field has narrowed very much in recent years.

Higgsboson 11-12-2016 01:31 PM

I have installed Icedove onto my debian OS.
I then opened up the email client and it offers me a domain name I can buy with gandi.net.

This domain name provider also hosts your email. The cost varies depending on the domain name but is about $10 per annum.

So it seems debian is offering secure email with its secure OS.
The secure email is provided by the French company gandi.net and you have to pay for it. So it's 'libre' not 'free'.

Gandi.net has recently opened offices in the US (Wikipedia).
So I don't know if that means they're complying with US govts need for mass surveillance or whether US folk are using Gandi.net because it avoids surveillance.

Higgsboson 11-12-2016 01:36 PM

Quote:

Originally Posted by Turbocapitalist (Post 5629660)
However, the big one is that the way Protonmail is setup, you are relying on both their good will and lack of legal pressure.

The way Protonmail is setup it looks like a mickey mouse outfit.
It should be promoting its encryption and ease of use - not the fact that it's Swiss and lives under a mountain!

Gandi.net is the preferred supplier for debian's email system. We have to make our own judgement call on that.


All times are GMT -5. The time now is 08:42 PM.