Best free p2p encyrpted onion email service that can send to non-onion addresses? : OpSec

2 points

7 years ago

There aren't really any good options, that I'm aware of, ever since CadaMail disappeared.

You'll have constant problems with not being able to send mail to various providers, and won't be able to receive from others. Giant pain in the ass.

Best you can do is probably Disroot. They don't have any hidden services that I am aware of, but they have plenty of storage, POP3, and it's free, and doesn't require any phone number or an alternate email. Can be used from Tor with no problem. It does require Javascript to sign up, but that's fine if you use Whonix.

/u/jarjarbinkz 📢

1 points

7 years ago

I'll check Disroot, sounds like a winner

/u/Witchman05

1 points

7 years ago

Personally, I used ProtonMail for a while, but I recently signed up for SecMail as well. Now I keep both, in case someone wants to use either one.

/u/SteadySupplies

1 points

7 years ago

ProtonMail is snake oil garbage, and SecMail is impossible to deal with, as you can't email many other servers, and many servers have it blacklisted. It's always a nightmare when any customer emails me from SecMail.

/u/Witchman05

1 points

7 years ago

What would you suggest, then? Just to point it out, the only reason I use them are to spam people who advertise scam businesses and spambots on forums I frequent, really.

/u/SteadySupplies

1 points

7 years ago

disroot.org

/u/Quasar

1 points

7 years ago*

Whats bad about proton specifically? Seems to be a privacy favorite for a lot of people right now but what issues do you see? It seems that setting up a personal server using PGP would be better but other than the fact that there are better options out there whats the problem?

Edit: Just scrolled down and saw your post below. Seems unlikely that its a honeypot I doubt LE would go to that length let alone charge so much for an email service. That would cause users to stay away if anything not to mention the public embarrassment if they got caught doing that sort of thing

/u/SteadySupplies

1 points

7 years ago

>public embarrassment

Feds run Child Porn (hurtcore) servers. Nothing you mentioned is evidence that it's not a honeypot. But as I said in my other post, it may not be a honeypot, but it would likely be trivial for NSA to infiltrate their server, and then it would be very easy to read everyone's "encrypted" emails.

The point is, it's no more safe than Gmail, and at least with Gmail doesn't offer any false sense of security, which ultimately makes gmail much safer than ProtonMail.

/u/sickTightLip

0 points

7 years ago*

Why do you people listen to this idiot. Proton mail is quite secure. They do not log your messages and js requirement is not that odd at all. This guy is always downplaying useful resources. This guy is a fucking fed. I bet he recommends btc instead of xmr too... besides 2048 is the security standard in encryption meaning its trusted and proton mail offers 4096 encryption anyway.... anyway you should be locally encrypting messages with pgp anyway. Why wouldn't you that is what it's for... secure email is just an added layer... at lest proton offers a hidden service unlike disroot

/u/SteadySupplies

0 points

7 years ago

http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion/post/a3b2fd5413d22f541bad/#c-71854bf849bf719877

If you look at the comment history of the above clown, they give a lot of GREAT advice. Such as "use Dream", and "use ProtonMail". They clearly either know nothing about OPSEC, or here to intentionally get people busted.

/u/sickTightLip

0 points

7 years ago

I stand by dream and i stand by proton mail... a reputable company not run by a small team of volunteers with no onion site... And dream is the only reliable market, whether you like it or not. They have never sacrificed security in fact they actively enhance security and have returned funds after the wallet crash and just banned ftc so obviously they are working on customer support issues

/u/SteadySupplies

1 points

7 years ago

Everything you just said proves that you have no idea what OPSEC is, or you are actively trying to get people to use bad OPSEC.

Either way, /u/HugBunter should shadowban you, so you don't get anyone in trouble.

You're a cancer to this community.

/u/sickTightLip

0 points

7 years ago*

I would be happy if he hug bunter please would look at all my posts and tell me if i deserve to be banned, hes the judge and i really would love to know. I think i contribute a few helpful thoughts here and there, and this guy makes wild accusations without a shred of evidence and then goes and calls people LE for responding with a cohesive rebuttal. Not to mention everything he complains about is purely matters of opinion not fact. Pmail is snake oil! SNAKE OIL! that's what this guy contributes... yet I'm not going to mention his username in any post i write because he is a creator and owner of a darknet enterprise, a busy person using his time to grow and improve on this site that gives you and me a voice... to even attempt to derail his responsibilities by involving him in such a ludicrous and trivial obscenity of a request is embarrassing and i seriously feel bad for you

/u/HugBunter A (っ♡⃛人♡⃛)っ🐛

2 points

7 years ago

Not worthy of a ban, just be careful with opinionated posts for leading people down not necessarily factual paths. Dream didn't return most of the "lost" funds, they were out right stolen, their story doesn't make any sense as to why the coins were lost, it wasn't in any way plausible. I haven't got time to read any further, just wanted to state that.

/u/SteadySupplies

1 points

7 years ago

And how many coins were lost when LE ran Silk Road 2 for 365 days before exit scamming, and arresting everyone? We all warned everyone back then too, and everyone said the same nonsense "THERE'S NO PROOF!!!". Well anyone would any common sense who had done a few seconds or research could find plenty of evidence pointing to a honeypot.

A lot of people got locked up and lost a lot of money because random people on the internet who know nothing about what is going on don't want to believe that their favorite market is under LE control, and so go on promoting it and flaming anyone who points out the red flags.

Makes you wonder who is really behind a lot of these braindead promotional accounts.

/u/p0lly

1 points

7 years ago

>p2p
>.onion
pick one

Get on ⚠️I2P⚠️ and install ⚠️I2P-Bote⚠️ if you want truly anonymous, peer-to-peer and end-to-end encrypted e-mail.

/u/sickTightLip

1 points

7 years ago

Totally but the other guy has to have garlic routing setup also

/u/Oxygen

1 points

7 years ago

check Bitmessage as an email alternative that works P2P

/u/Lsdslayer

0 points

7 years ago

proton can send to any email address at least it does for me.

/u/sickTightLip

1 points

7 years ago*

Honestly proton mail is more secure than disroot because disr only encrypts aes and tsl if the landing party is capable where proton uses aes and open pgp with no access to the cryptographic keys. Not to mention they both us ssl and proton mail can send disappearing msgs and an encrypted message to a non proton mail user with a link to own the encrypted message in three browser using a pasphrase that you assign to them... disroot can do that?

/u/SteadySupplies

-2 points

7 years ago

ProtonMail is Snake Oil.

/u/that1chick

2 points

7 years ago

why is that?

/u/SteadySupplies

1 points

7 years ago

They generate insecure keys. (2048 bit instead of 4096 bit). You can't use POP3, so you have to log in to their server through web interface which requires Javascript. They are doing the encrypting and decrypting for you, so you don't control your private keys, and it would be trivial for them to serve you targeted malicious code that could render your PGP encryption useless. If you're not using Whonix, then it would be trivial for them to serve malicious code to de-anonymize you.

If it's not a honeypot, it's certainly a LEO Wet Dream.

/u/that1chick

1 points

7 years ago

I noticed the JavaScript and quit using it. I was curious if anyone else found that odd. Thanks for clarifying for me.
If is bad, then what other options are out there?

/u/jinx69

1 points

7 years ago

To be honest it came to me as a big suprise that they require js to be enabled. Considering that and the fact that you have to pay to use imap/pop3 basically eliminates the services to be used by journalists, signalists etc.

My tip is to use some regular free mail provider with open pop3 , based in a country that is as far away from one as possible, geographically and politically, like in the old days.

/u/SteadySupplies

0 points

7 years ago

disroot.org

/u/killuminati

0 points

7 years ago

secmail.pro

theres others too, i have a list posted up under the hidden service sub from before dread went down.

/u/jarjarbinkz 📢

1 points

7 years ago

Thanks! I'll have to check that out

/u/killuminati

1 points

7 years ago

no problem, im thinking of opening an email service myself to add to the other 6 services ive created. First a temporary email service though like guerillamail

Best free p2p encyrpted onion email service that can send to non-onion addresses? : OpSec | Torhoo darknet markets