[tor-talk] Why does requesting for bridges by email require a Yahoo or Gmail address?

[Matthew Finkel]

On Thu, Jul 24, 2014 at 06:37:27PM -0400, krishna e bera wrote:
> On 14-07-24 06:29 PM, ideas buenas wrote:
> > I don't trust Gmail nor Yahoo. Roger, found another way. No excuses, please.
> 
> I am curious why Riseup.net isnt in the list of popular and relatively
> secure email providers.  Also there must be several large european and
> asian free email providers, but someone from those regions might have to
> recommend/evaluate them.  How about yandex.ru for example?
> 

See https://trac.torproject.org/projects/tor/ticket/11139

I haven't looked much at other providers recently. We want to keep the
whitelist as small as possible. We can only make the situation worse by
increasing the attack surface. The email distributor is already
significantly weaker than the website. We'd rather provide more
safe/secure distribution methods.

> Another good method is to get a bridge directly from someone you trust.

This is already done informally. Eventually we will try to make this
safer (to some extent)[0].

[0] https://trac.torproject.org/projects/tor/ticket/7520