Linux - NewbieThis Linux forum is for members that are new to Linux.
Just starting out and have a question?
If it is not in the man pages or the how-to's this is the place!
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Distribution: Debian 8 Cinnamon/Xfce/gnome classic Debian live usb
Posts: 508
Original Poster
Rep:
Quote:
Originally Posted by Emerson
Icedove is an email client. All you do on the net can be eavesdropped on.
Yes, but this isn't very encouraging is it?
If Linux distros are secure, then they're completely useless if email is not secure as well.
I can't understand the point behind debian if email is compromised.
They offer Thunderbird/Icedove which is an email client and I think the email server is firefox.
I think this may be the most secure free option. But Wikipedia seems to be saying firefox is losing money on Thunderbird and so the free email service may end in the future.
I wonder if we can have a view where we can believe we can't be eavesdropped so easily.
Distribution: Debian 8 Cinnamon/Xfce/gnome classic Debian live usb
Posts: 508
Original Poster
Rep:
Quote:
Originally Posted by bimboleum
Before anything else you will need your own domain name and a static IP address from your ISP to be registered against that name.
This is very helpful. It seems like I'm creating my own website for secure email.
In which case, email security comes at a cost of price and effort. Quite unbelievable really. Good to see you've covered your back though!
Distribution: Debian 8 Cinnamon/Xfce/gnome classic Debian live usb
Posts: 508
Original Poster
Rep:
Quote:
Originally Posted by ardvark71
Hi...
I've been trying to find a nice tutorial on how to use a POP3 client, whether Icedove or in general but, unfortunately, I'm only able to find information on setting one up.
Regards...
Interesting isn't it? There's nothing out there about secure email.
So that's how mass surveillance and Prism works. It's through free webmail services - yahoo, gmail, and hotmail.
Think about it - who doesn't have an account?
After reading through this thread, I'd like to say this.
Gmail and Yahoo are not secure. This is true.
Those of us who need secure messaging might use Gmail and Yahoo still but on top of it we encrypt our messages using GPG or PGP. We do not depend on Gmail or Yahoo or whoever to protect our communication. We do that ourselves. And we still don't need a private "secure" email server.
Distribution: Debian 8 Cinnamon/Xfce/gnome classic Debian live usb
Posts: 508
Original Poster
Rep:
Quote:
Originally Posted by szboardstretcher
After reading through this thread, I'd like to say this.
Gmail and Yahoo are not secure. This is true.
Those of us who need secure messaging might use Gmail and Yahoo still but on top of it we encrypt our messages using GPG or PGP. We do not depend on Gmail or Yahoo or whoever to protect our communication. We do that ourselves. And we still don't need a private "secure" email server.
I see. So we can use free webmail for our email.
However, we use an encryption method such as GPG or PGP and our emails are hidden from the outside and from the free webmail service we're using. Is that correct?
Yes I do,.. I have since 2014. A protonmail.ch address originally, but now its protonmail.com as well. The interface is nice, they have themes. I forward all my outlook/gmail accounts to it. I also have the GPG keys created for the addresses and I use GPG in all my communications that matter to me.
Your emails aren't hidden using GPG. They are just unreadable by anyone but the person who has the correct 4096 bit private key. And to crack the GPG key would take something like the length of the universe.
Hope this helps
Last edited by szboardstretcher; 11-11-2016 at 01:59 PM.
Distribution: Debian 8 Cinnamon/Xfce/gnome classic Debian live usb
Posts: 508
Original Poster
Rep:
Quote:
Originally Posted by szboardstretcher
Yes I do,.. I have since 2014. A protonmail.ch address originally, but now its protonmail.com as well. The interface is nice, they have themes. I forward all my outlook/gmail accounts to it. I also have the GPG keys created for the addresses and I use GPG in all my communications that matter to me.
Your emails aren't hidden using GPG. They are just unreadable by anyone but the person who has the correct 4096 bit private key. And to crack the GPG key would take something like the length of the universe.
Hope this helps
Have you read about Protonmail on Wikipedia?
It is quite amusing
Distribution: Debian 8 Cinnamon/Xfce/gnome classic Debian live usb
Posts: 508
Original Poster
Rep:
Quote:
Originally Posted by ardvark71
How could you not trust a mail provider whose main datacenter is under "under 1,000 meters of granite rock?"
Clearly, you understand.
God help us. We may not get secure email in the West, but we will get it in the Promised Land!
Brother Jesus - I hope you're watching.
Have you read about Protonmail on Wikipedia?
It is quite amusing
It is a useful webmail service but it is quite amusing that webmail of any stripe is being touted as either secure or securable. It is trivial to do layer 7 man-in-the-middle attacks on web mail in a lot of situations. However, the big one is that the way Protonmail is setup, you are relying on both their good will and lack of legal pressure. Even with MitM aside, with the Protonmail setup, it is their choice whether or not to read your mail even if they pretend to encrypt it. When they support IMAPS and SMTP, that will be a different matter.
A few years GMX used to offer some mail service but seems to have stopped. The field has narrowed very much in recent years.
Distribution: Debian 8 Cinnamon/Xfce/gnome classic Debian live usb
Posts: 508
Original Poster
Rep:
I have installed Icedove onto my debian OS.
I then opened up the email client and it offers me a domain name I can buy with gandi.net.
This domain name provider also hosts your email. The cost varies depending on the domain name but is about $10 per annum.
So it seems debian is offering secure email with its secure OS.
The secure email is provided by the French company gandi.net and you have to pay for it. So it's 'libre' not 'free'.
Gandi.net has recently opened offices in the US (Wikipedia).
So I don't know if that means they're complying with US govts need for mass surveillance or whether US folk are using Gandi.net because it avoids surveillance.
Distribution: Debian 8 Cinnamon/Xfce/gnome classic Debian live usb
Posts: 508
Original Poster
Rep:
Quote:
Originally Posted by Turbocapitalist
However, the big one is that the way Protonmail is setup, you are relying on both their good will and lack of legal pressure.
The way Protonmail is setup it looks like a mickey mouse outfit.
It should be promoting its encryption and ease of use - not the fact that it's Swiss and lives under a mountain!
Gandi.net is the preferred supplier for debian's email system. We have to make our own judgement call on that.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.