💾 Archived View for gemlog.blue › users › Sw4mp_Sl0th › 1723921311.gmi captured on 2024-09-29 at 03:14:37. Gemini links have been rewritten to link to archived content

View Raw

More Information

⬅️ Previous capture (2024-08-31)

-=-=-=-=-=-=-

20240817 - Thoughts on communication methods and encryption

Home

Sw4mp_Sl0th's Random Thoughts

Instant/Text Messaging

I try to use mostly decentralized communication services such as XMPP/Jabber (with OMEMO) and Matrix to send/receive text messages whenever possible (mostly to avoid corporate surveillance). There are others, which you can learn more about at the Privacy Tools website, but I've limited my contact info. to the messaging protocols mentioned above. Once you have selected an XMPP/Jabber client you'll have to also find a public server (do a search on "normal" space for Public XMPP server). For the Matrix protocol, if you decide to use the Element client then you'll be able to create a free account on matrix.org (they'll ask for an email address to prove you are not a bot... or so they say). You also have the option of signing up on a different Matrix public server, but you have to find it yourself (do a search on "normal" space for Public Matrix server).

Messaging clients I use, which have implemented end-to-end (E2E) encryption:

Conversations (XMPP/Jabber client for Android)

Gajim OMEMO (XMPP/Jabber client for GNU/Linux, Windows, MacOS)

Element (Matrix client for GNU/Linux, Windows, MacOS, iPhone and Android)

More clients for the XMPP and Matrix protocols (warning: some of these clients have not implemented E2E encryption):

More XMPP/Jabber clients

More Matrix clients

Website that provides information on encrypted services, software and apps:

Privacy Tools Guide

Email for personal/private communications and GPG/PGP message encryption

If you send emails in the clear (meaning you login to Gmail, type in your message and click send), then assume everyone and anyone will be reading it, so keep your information boring/mundane (a hearty hello, a thanks for adding content to Geminispace or even a go f-yourself Sl0th 😁). However, if you rather give the middle finger to data mining neural network algorithms, then take matters into your own hands and encrypt your messages. If you want to ask ol' Sl0th for help in overthrowing an evil regime then for the love of all that is good, holy and wholesome please encrypt your messages.

OK Sl0thy, you win. How do I encrypt my messages? Glad you asked. The fine folks at Email Self-Defense have put together a thorough guide on the subject of email encryption. The page is a good read (at least skim through it to familiarize yourself with terms like "key-pair"), however they focus on using email clients like Thunderbird, which is fine (up to a point… that damn telemetry will get ya though) if your email service provider allows Thunderbird to connect to their servers. But what if it doesn't? No worries, you can download applications like GpgFrontend, Gpg4win or Kleopatra and encrypt the message there, then copy the encrypted message (or file) to your webmail. I've used all of the applications listed above and IMHO GpgFrontend comes across as the most intuitive to me, and the guide/manual is easy to follow. Also, don't forget to send me your PGP public key, so my reply to you can be encrypted as well.

To summarize, you'll want to:

Email Self-Defense

GpgFrontend (clients for GNU/Linux and Windows)

Gpg4win includes Kleopatra (GNU Privacy Guard for Windows)

Kleopatra (GNU/Linux)

GpgFrontend user guide

Other thoughts on instant/text messaging and email

When sending sensitive/important messages to family, friends and acquaintances I try not to use any intrusive centralized communications applications that demand my phone number to sign up (like X/twitter, Facebook, Instagram, WhatsApp, Snapchat, Signal, Telegram, etc.). This has led me to loose contact with most of my clueless normie friends/acquaintances, but that's neither here nor there. There are instances where you may have to maintain a normie facade, so using the invasive apps could prove effective, but when using them we keep the messages boring/mundane (let the algorithms keep flagging you as a boring useful idiot, even though you and I know you're not 😆).

As far as email (and VPN) providers go, I honestly do not trust any of them. All of them WILL buckle under a court order (yes even Proton will provide that juicy metadata). So what can we do? Compartmentalize! Create a new identity and carefully consider what you'll be doing with this identity. If you just want to say "hello" to ol' Sw4mp_Sl0th, then a DNMX, Mail2Tor or Alt Address email account created via Tor will suffice (I know, honeypots and all that jazz, but you'll just be sending Sl0th an encrypted "hello," and you won't be using this email account for ANYTHING else, right?). If you want to keep a certain level of obfuscation (there is no such thing as fully anonymous), then one of those email (and free VPN) service providers, which does not require you to use a mobile number to sign up, will do the job.

Proton Mail and Mail.com (if you can get past their Tor/VPN check nonsense) are "serious" email providers that don't require you use a cellphone number (as of this writing they provide you with the option to use an email to verify you're not a bot) and won't freak out some of the normie care-bears out there (if you're hanging out in Geminispace, then chances are you're not a normie care-bear). Mail.com is known for data mining their users to death (just look at how uBlock Origin responds when you visit their site 😱), and imagine what they are doing behind the scenes (I try not to LoL). However, Proton Mail makes the claim that they truly care about the privacy of their users and on the surface their actions seem to support their stance, so I'll choose Proton Mail over Mail.com any day.

Wait Sw4mp_Sl0th, what if I want to discuss world domination plans? The prep-work for that conversation would have to take place on XMPP/Matrix space and I would probably refer you to someone else, because operators get killed. 😉

DNMX (Tor)

Mail2Tor (Tor)

Alt Address (Tor)

Proton (Tor)

Mail.com