Operation Security: A step-by-step guide using Ubuntu Linux. by opsec security

Author:opsec security [security, opsec]
Language: eng
Format: azw3
Published: 2018-11-10T16:00:00+00:00

Secure Email

There are many messaging programs or services that offer some type of encryption.

We need end-to-end encryption.

A way in which the messages are stored and sent encrypted and only the sender and receiver can read them.

So, in this lesson, we’re gonna be taking a look at secure email services.

Most people send unencrypted emails that are stored on a company's private servers. Emails are transferred as plain text, and can be intercepted by anyone. They get processed by the email provider company so it can provide a free service.

For example with gmail, all messages are stored in a way Google can access them.

Services that provide free unencrypted email also can scan all the mails because it is a rich source of data.

Even with a new email confidentiality feature, gmail is the least secure email, because all confidential emails are stored on google servers and they have access to them.

PGP or GPG can be used with unencrypted messaging services to make them more secure, but even with encrypting everything, the use of these services are not recommended as they log Ip, geo-location, who you send the message and when.

They can collect a lot of metadata.

The fact that you are using encryption is valuable data.

Emails are not he best for secure communications.

The most secure encrypted email service I can recommend after reading a lot of privacy policies and testing out services is protonmail.com.

This email provider is based in Switzerland.

They can store your mails away from the prying eyes of governments because of Switzerland data privacy laws, they offer end-to-end encryption and don’t log user IP.

They also have a website on tor hidden services. protonirockerxow.onion/

When using the hidden service website, you should inspect the SSL certificate in your browser to make sure you are connected to Protonmail servers and not a fake website. Its easy to make mistakes when typing the domain name and phishing websites can look real.

Protonmail is not a free mail service. Accounts can be created for free, but are limited.

These free accounts are good for everyday use but people who receive large amount of messages or need bigger storage need to pay a monthly subscription fee to get it.

Services are free, because they collect user data.

If you want a good encrypted email service, you probably need to pay for it.

There is one more email provider that I think is worth mentioning, a built in email service in I2P, which is the Invisible Internet Project.

I2P will be discussed later in more detail. What you need to know now.. is that I2P Susi mail can provide a free, unencrypted email service that does not log user IP, and with the use of previously learned GPG encryption it is a very nice email service for everyday use.

I2P has a fully encrypted email service too, I2P Bote but that cannot send or recieve messages to clearnet addresses, only works on I2P.

I like the I2p Susi mail because while the messages are not encrypted, the service cannot log any data about the users and they take great care about making sure the mail headers don’t carry any extra meta data.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.