|
Top Security Sites
|
·
·
·
·
·
·
·
·
·
·
|
|
 |
Mail anonymity. Remailers.
" ...Yes, email messages have neither weight nor feet... But their track will lead to you like footsteps on snow !"
Traveling through the Internet every mail accumulates the trails of
every machine it passes, along with the date, time and IP. Since this
"post stamp" is rather ugly and useless for correspondents, the email
programs normally hide it. But it's very easy to trace a message back
to its author by reading this headers in the mail message.
There are several ways to deal with headers and hide yourself. The best
is to use an Anonymous Remailers. A remailer is an address through
which electronic messages pass before embarking on the rest of its
journey to its actual destination. It wipes out all the headers that
can disclose your identity. There are various remailer systems. Some
systems give you an anonymous address that other people can send you
mail, which is then forwarded to your real address (so-called
"pseudo-anonymous"). They keep the database of 'real names' so you can
be potentially traced back or the owner can be forced to give this
information away. The rest of remailers act using 'fire and forget'
principle and keep no logs. In fact, nowadays there're two different
classes of remailers Cypherpunk and Mixmaster. A majority of remailers
use encryption.
Cypherpunk
The first step in the evolution of really anonymous remailers was
Cypherpunk Remailers, also called "Type I" remailers. With a Type I
protocol, a single message is forwarded between several systems before
reaching its destination, with identity stripped at each link.
Moreover, and perhaps even more importantly, Type I remailers never
create a database of identities.
Under the Type I protocol, a user must construct an intended chain of
remailers, encrypting a message in a separate layer for each remailer.
Each remailer publishes a PGP public key that users may use for an
encryption layer. When a Cypherpunk remailer receives a message, it
strips off a layer using its own private key, finding the identity of
the next remailer within the decrypted bundle. Each remailer is able to
decrypt the bundle it receives, but it cannot itself look more than one
link ahead (the one it should forward to), let alone determine the
final destination. Moreover, after the first link, the sender's
identity has been removed: the first link only knows the sender, not
because of anything in the bundle, but from who sent the bundle in the
first place.
Mixmaster
Mixmaster are "Type II" remailers. They go one step further by
assuming that every network connection is being monitored. In order to
protect against those with the computing resources to monitor all
network traffic, Mixmaster creates specific mechanisms to overcome
agents studying traffic patterns. These mechanisms include reordering
and message padding. Rather than simply forward each package to the
next link as soon as it is received, a Mixmaster node will save
messages for variable durations, bundling collections of messages
together for transmission to a downstream node. So type II remailers
are much more resistant to traffic analysis, unreliable nodes, and
other attacks than are Type I remailers.
Ok, the anonymity is my right. But I'm not a computer guru...
It may seem that the actual, everyday use of remailers is difficult.
This is hardly the case. Remailers are actually very easy to use thanks
to a number of client front-ends available for several computing
platforms.
(check our tools section for some free clients like Quicksilver, Jack B. Nymble etc)
Web remailers are quite nice if you need easy " one click" privacy
mail. Such pages permit you to send emails via anonymous remailing net
without using a specific client
( Riot Anonymous Remailer with SSL Encryption (in Italy, free) )
( Freedom Project Remailer without SSL (in USA, free) )
( Yahoo listing of anonymous Remailers )
Remailers Tips
Use client base remailers.
Web-based remailers are not as secure as normal one, because the encryption process is on this server and not on your computer.
Use secure connections for web remailers
Make sure that you use a secure connection (if possible) to compose and
send messages. Unless you take precautions your message and the final
recipient will be sent unencrypted to the webserver where the remailer
is based, so anyone listening in on your connection to the server could
know who and what you are mailing. To stop this you should make sure
your web browser has 128 bit SSL Encryption and connect to one of the
web remailers that uses a HTTPS connection with SSL ENCRYPTION.
Use PGP for type I remailers
Encrypting outgoing message with the Cypherpunk remailer's public key
is a simple and efficient way to increase you privacy. This can be done
with any text editor like Notepad and a
properly installed version of PGP. Keep in mind too that there are
currently only a few Cypherpunk (Type I) remailers that will accept
non-PGP messages and their numbers are dwindling.
Use chaining.
Since your message must enter the remailer network somewhere, that
first remailer operator can always know where the message is really
coming from. He knows as much about you as can be revealed from your
email headers. But if your message is chained to another remailer and
encrypted with that remailer's key, then the first remailer and anyone
snooping his traffic cannot read your message.
|