Use of Tor and e-mail crypto could increase chances that NSA keeps your data

Re:Use of Tor and e-mail crypto could increase chances that ... by dfc on Thursday June 20, 2013 @11:06PM (#5916300)

"I will start GPG encrypting email to anybody I know who will be able to deal with it"

As sad as it is to say, lets be honest and admit that this is a fairly small number. How long do you think it will be till your less committed friends get tired of decrypting your emails and just ignore what you send? Make sure you only pick people that use actual email clients because gpg and Gmail is no fun.

As far as the "Thomas Crowne Affair attack" goes generating effective cover traffic is not easy and random traffic is definitely a bad idea. Basic traffic analysis would be able to separate your legit emails from your cover traffic.

Addendum: I noticed you just generated your new gpg key yesterday. Why not go big and use a 4096 bit key?

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by icebraining on Friday June 21, 2013 @02:29AM (#5916852)

It seems someone has written a PGP extension for Chrome/GMail: https://chrome.google.com/webstore/detail/mymail-crypt-for-g...

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by joeyo on Friday June 21, 2013 @03:49AM (#5917027)

I've just started using mailvelope, which works with several webmail providers and also has a firefox extension:

https://chrome.google.com/webstore/detail/mailvelope/kajibbe...

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by swombat on Friday June 21, 2013 @04:07AM (#5917065)

It looks like Mailvelope only supports RSA encryption (up to 4096bit), not any of the other types of algorithms for PGP. It lists RSA/RSA and RSA/ElGamal but doesn't allow me to select them. Can someone who knows their shit about encryption chime in as to whether that's sufficient?

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by bigiain on Friday June 21, 2013 @12:03AM (#5916452)

Now I'm thinking of a patched SMTP server, that queues all outgoing mail - and sends mail every hour on the hour to each of my GPG enabled recipients, with a queued "real mail" if there is one or a random encrypted NSA RickRoll if there's no real mail to send.

(I suspect that'd last about 121 minutes before most of my friends spam filtered me forever)

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by dfc on Friday June 21, 2013 @01:48AM (#5916760)

Don't forget you have to use your main machine to send the random messages to your smtp server. If you do not it will be pretty easy to recognize what mail was routed through the machine and which messages were randomly generated by the server as a cover traffic.

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by rdl on Wednesday June 26, 2013 @06:13AM (#5945124)

Every protocol should allow "no-ops" of arbitrary size, and then make it easy to do traffic analysis defeat by doing communications scheduling like that.

[ Parent | on HN ]