Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-14 Thread Menachem Moystoviz
On Sun, Oct 14, 2012 at 10:45 AM, Gaetan Bisson wrote: > [2012-10-14 10:19:10 +0200] Menachem Moystoviz: >> So in essence, what you're proposing is to only upgrade from VPS to private >> hosting when the resiliency of my private server is good enough - i.e. not >> most >> naive setups? It does ma

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-14 Thread Gaetan Bisson
[2012-10-14 10:19:10 +0200] Menachem Moystoviz: > So in essence, what you're proposing is to only upgrade from VPS to private > hosting when the resiliency of my private server is good enough - i.e. not > most > naive setups? It does make sense, and would make backups more urgent > and important.

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-14 Thread Menachem Moystoviz
>> > That's debateable, DOS sure, but you have much greater control and speed >> > of access with a local mail server and past mail will still be >> > accessible during any attack. >> I wasn't referring to DOS/DDOS-style reliability. In my mind, >> reliability ~= uptime > 99.999% >> Of course, you'

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-13 Thread Gaetan Bisson
[2012-10-14 00:21:15 +0200] Menachem Moystoviz: > On Fri, Oct 12, 2012 at 3:19 PM, Kevin Chadwick wrote: > > Sending to you directly as this mail was rejected by the list!!! > That's a pity, this mail is informative, however the mods might > disagree with the tone you used with respect to Yahoo an

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-13 Thread Menachem Moystoviz
On Fri, Oct 12, 2012 at 3:19 PM, Kevin Chadwick wrote: >> My other option is to host my own mail server, either at home or on a >> VPS (which would cost more), >> which means much lowered reliability, which means much lowered >> reliability > > Sending to you directly as this mail was rejected by

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-12 Thread Victor Silva
2012/10/12 Menachem Moystoviz > From the responses I've received, I gather the following: > - Crypto is only going to get me so far, unless I can coerce all > incoming email to use TLS > - Until I have a steady income, my best bet is to use Google Apps for my > domain > and to download all inco

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-12 Thread Menachem Moystoviz
>From the responses I've received, I gather the following: - Crypto is only going to get me so far, unless I can coerce all incoming email to use TLS - Until I have a steady income, my best bet is to use Google Apps for my domain and to download all incoming mail - probably deleting it from Googl

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-12 Thread gt
On Thu, Oct 11, 2012 at 02:13:54PM -0400, Dave Reisner wrote: > Google has no interest in singular people. Moreover, Googlers who take > an interest in data or logs belonging to singular people find themselves > no longer working at Google. I would believe that googlers who are "caught" peeking at

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-12 Thread Dave Reisner
On Thu, Oct 11, 2012 at 07:49:00PM -0500, sung...@gmail.com wrote: > On Thu, Oct 11, 2012 at 02:13:54PM -0400, Dave Reisner wrote: > > > Really, just add two-factor auth to a gmail account and be done with > > it. Google has no interest in singular people. > > It should be noted that Gmail's two-

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Sung Pae
On Fri, Oct 12, 2012 at 11:23:08AM +0800, Oon-Ee Ng wrote: > On Fri, Oct 12, 2012 at 8:49 AM, wrote: > > > Neither of these things would stop a truly determined > > government-level attacker (unencrypted mail is still vulnerable > > in-flight for instance), but it would be useful if you have not

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread David Rosenstrauch
On 10/11/2012 07:35 PM, Menachem Moystoviz wrote: Therefore, I think I should go with the first route, possibly searching for ways to ensure end-to-end encryption and to make the email address's domain my own. Both are easy to do. Fetchmail supports SSL encryption on your connection to the ho

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Oon-Ee Ng
On Fri, Oct 12, 2012 at 8:49 AM, wrote: > > Neither of these things would stop a truly determined government-level > attacker (unencrypted mail is still vulnerable in-flight for instance), > but it would be useful if you have not yet been identified as someone of > interest. > > guns Being O

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread sungpae
On Thu, Oct 11, 2012 at 02:13:54PM -0400, Dave Reisner wrote: > Really, just add two-factor auth to a gmail account and be done with > it. Google has no interest in singular people. It should be noted that Gmail's two-factor authentication provides no extra security if you're planning on using it

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread David Benfell
On 10/11/2012 09:14 AM, Taylor Hedberg wrote: And I've never set up DKIM, SPF, etc. and yet I've never had problems with people receiving mail from my domain. Results may vary, of course, but I don't think it's a big deal as long as you aren't hosting your MTA on a PC in your basement with a dy

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Menachem Moystoviz
Reading through the responses, I find that my previous evaluation of my options was correct. The most reliable and easiest solution, by far, would be to set up a standard account, and to download a copy of all emails. The only problems with this are the lack of control and privacy. My other option

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Leonid Isaev
On Thu, 11 Oct 2012 18:39:17 +0200 Menachem Moystoviz wrote: > On Thu, Oct 11, 2012 at 6:29 PM, phanisvara wrote: > > On Thursday 11 Oct 2012 18:18:10 Menachem Moystoviz wrote: > >> Basically, the suggestion I'm seeing here is: go, work, get a VPS - > >> can probably get one for cheap - and setu

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Dave Reisner
On Thu, Oct 11, 2012 at 06:18:10PM +0200, Menachem Moystoviz wrote: > Basically, the suggestion I'm seeing here is: go, work, get a VPS - > can probably get one for cheap - and setup Arch on it. > Sounds good. Will only have to figure out how to get money... > > Gesh Yes, and then spend the rest

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread David Rosenstrauch
On 10/11/2012 11:50 AM, Menachem Moystoviz wrote: Aye, but I have the following concerns regarding hosting the server myself: - Only have one server - no redundancy or reliability This was a big concern for me. It's nice that when my server is down emails just collect over at Dreamhost until

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Vesa Muhonen
On Thursday 11 October 2012 13:23:32 Menachem Moystoviz wrote: > The alternatives I'm aware of are: > 2) Host my own server, paranoia demanding multiple redundant backups. > > Pros: > 2) Gain vast amounts of power over my email > > Cons: > 2) Hard to maintain, can crash at any moment, will drive

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Scott Lawrence
On Thu, 11 Oct 2012, Menachem Moystoviz wrote: Recently, my paranoia levels have been ratcheted up by reading about companies' treatment of their users, along with an increasing awareness of my powerlessness with respect to most content providers. I therefore curbed most online activity and have

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Kevin Chadwick
> Use cheap vps with static ip, it will be much easier. I doubt anyone > keeps their mail server in home with dynamic ip. Why should you doubt that, I've read many a blog where that is the case. A few also block any dsl ip even though there are far better ways of detecting spamming viruses which

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Kevin Chadwick
> Aye, but I have the following concerns regarding hosting the server myself: > - Only have one server - no redundancy or reliability > - No source of income -> no possibility of VPS AFAIK > - DKIM, PTR, SPF, rDNS all require money and static IP (more money) > Easydns is cheap for spf but charges

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Menachem Moystoviz
On Thu, Oct 11, 2012 at 6:29 PM, phanisvara wrote: > On Thursday 11 Oct 2012 18:18:10 Menachem Moystoviz wrote: >> Basically, the suggestion I'm seeing here is: go, work, get a VPS - >> can probably get one for cheap - and setup Arch on it. >> Sounds good. Will only have to figure out how to get m

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread phanisvara
On Thursday 11 Oct 2012 18:18:10 Menachem Moystoviz wrote: > Basically, the suggestion I'm seeing here is: go, work, get a VPS - > can probably get one for cheap - and setup Arch on it. > Sounds good. Will only have to figure out how to get money... seen this on G+ today. no idea if it can help yo

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Menachem Moystoviz
Basically, the suggestion I'm seeing here is: go, work, get a VPS - can probably get one for cheap - and setup Arch on it. Sounds good. Will only have to figure out how to get money... Gesh

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Taylor Hedberg
Menachem Moystoviz, Thu 2012-10-11 @ 17:50:20+0200: > Aye, but I have the following concerns regarding hosting the server > myself: - Only have one server - no redundancy or reliability You can set up more than one if you're that worried about reliability, but it's almost certainly overkill for a

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread G. Schlisio
Problem - as a high school graduate, I don't exactly have a steady source of income. I could try to find income sources, but I'm not aware of what cheap VPSs exist. in the wiki, you can find some vps provider providing arch. check their prizes, some are below 10€/month. as i'm in germany, i use

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Menachem Moystoviz
On Thu, Oct 11, 2012 at 3:56 PM, Taylor Hedberg wrote: > Menachem Moystoviz, Thu 2012-10-11 @ 13:23:32+0200: >> Which do you suggest? Do you have an alternative? > > I use Postfix + Dovecot on an Arch Linux Linode VPS and I'm pretty happy > with it. > > >> 2) Hard to maintain, can crash at any mom

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Menachem Moystoviz
> I do a combination of #1 and #2. > > I have a (cheap!) web hosting account (with Dreamhost) which also provides > me with an email address on their mail system. I have the DNS entries for > my domain point to Dreamhost, so any mail for my domain gets delivered > there. > > But I only use Dreamho

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Menachem Moystoviz
Thank you. The questions posed were quite enlightening, and showed me that this needs a bit more thought. > I believe first question you need to answer is: what is your threat model? > > Are you afraid of losing all your mails (backups)? Losing control over > your email address? What are you going

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Taylor Hedberg
Menachem Moystoviz, Thu 2012-10-11 @ 13:23:32+0200: > Which do you suggest? Do you have an alternative? I use Postfix + Dovecot on an Arch Linux Linode VPS and I'm pretty happy with it. > 2) Hard to maintain, can crash at any moment, will drive me to early > grave It is a bit of a pain to initi

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread David Rosenstrauch
On 10/11/2012 07:23 AM, Menachem Moystoviz wrote: Also, I've seen many users with email addresses issued by their own domain, which leads me to believe some of you may have gone through this before. The alternatives I'm aware of are: 1) Do what most people do, and just sign up for webmail, par

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Krzysztof Warzecha
I believe first question you need to answer is: what is your threat model? Are you afraid of losing all your mails (backups)? Losing control over your email address? What are you going to do if you can't login to your mailbox tommorow? How much do you mind if someone else gain access to your old m

Re: [arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Garrik
Le Thu, 11 Oct 2012 13:23:32 +0200, Menachem Moystoviz a écrit : > Recently, my paranoia levels have been ratcheted up by reading about > companies' treatment of their users, along with an increasing > awareness of my powerlessness with respect to most content providers. > I therefore curbed most

[arch-general] Suggestions for email for a paranoid Archer

2012-10-11 Thread Menachem Moystoviz
Recently, my paranoia levels have been ratcheted up by reading about companies' treatment of their users, along with an increasing awareness of my powerlessness with respect to most content providers. I therefore curbed most online activity and have attempted to host those services I used on my own