Using Gmail (with Tor) is a bad idea
Claude LaFrenière
climenole at gmail.com
Tue Sep 19 00:32:10 UTC 2006
Hi *Fabian Keil* :
> Just in case you wondered whether Tor and Gmail are a good
> combination: They are not.
[...]
> About 0.3% of my Tor exit nodes' users seem to consider using
> Gmail with Tor a good idea. I suggest they reconsider.
I'm using Gmail with Tor and Thunderbird not Firefox or an other browser.
pop.gmail.com on port 995 -> SSL ...
smtp.gmail.com port 587 -> TLS ...
So the connections between my computer and the Google servers
are encrypted. (With or without Tor...)
With this the only privacy problem remaining is what Google is doing
with the mail data in their servers... and this can be easily solve by
using PGP/ GnuPG.
I'm not convinced that Tor failed to encrypt correctly the communications
with the combination of Tor + Firefox + Gmail ...
If your demonstration is correct there is a problem with Tor itself:
how a Man-in-the-middle may have an access to the authentication cookies ?
I'm interested to have some advices on this.
:)
--
Claude LaFrenière
More information about the tor-talk
mailing list