List of references for Volume IV - End Point Protection Sections 11-12

147. Clients, Protocols and Authentication
Websites
Is STARTTLS more safe than TLS/SSL?

Secure Email Test Tools and Services
https://www.checktls.com

148. Email Weaknesses
Websites
The Current State of SMTP STARTTLS Deployment
https://www.facebook.com/notes/protect-the-graph/the-current-state-of-smtp-starttls-deployment/1453015901605223/
Google - Email encryption in transit
https://www.google.com/transparencyreport/saferemail/
Free online fake mailer with attachments, encryption, HTML editor and advanced settings
https://emkei.cz/
Identifying important information in emails
https://www.parsemail.org/

149. PGP, GPG & Privacy
Software
Symantec Desktop Email Encryption
https://www.symantec.com/en/uk/products/information-protection/encryption/desktop-email-encryption
The GNU Privacy Guard
https://www.gnupg.org/
Reports
rfc4880.txt OpenPGP Message Format
https://www.ietf.org/rfc/rfc4880.txt
An Introduction to Cryptography
ftp://ftp.pgpi.org/pub/pgp/7.0/docs/english/IntroToCrypto.pdf

150. PGP & GPG Clients
Websites
How to: Use PGP for Windows

How to: Use PGP for Mac OS X

The best PGP tutorial for Mac OS X, ever
http://notes.jerzygangi.com/the-best-pgp-tutorial-for-mac-os-x-ever/
How to: Use PGP for Linux

Secure Mobile Apps

OpenPGP public-key cryptography
https://tails.boum.org/doc/encryption_and_privacy/gpgapplet/public-key_cryptography/index.en.html
Decrypt or verify a text created using OpenPGP Applet
https://tails.boum.org/doc/encryption_and_privacy/gpgapplet/decrypt_verify/index.en.html
Software
iPGMail

GPG Suite
https://gpgtools.org/
Android - OpenKeychain: Easy PGP

Mailvelope
https://www.mailvelope.com
Secure Mail for Gmail chrome extension
https://chrome.google.com/webstore/detail/secure-mail-for-gmail-by/jngdnjdobadbdemillgljnnbpomnfokn?hl=en
Mymail-Crypt for Gmail - PGP extension for chrome

End-To-End is a library and a chrome extension that helps you encrypt, decrypt, digital sign, and verify signed messages within the browser using OpenPGP.

WebPG for Mozilla - An extension which provides PGP functions to Firefox, Thunderbird and Seamonkey
https://addons.mozilla.org/en-GB/firefox/addon/webpg-firefox/
gpg4usb project
https://www.gpg4usb.org/

151. Windows - PGP & GPG
Websites
The Gpg4win Compendium Secure e-mail and file encryption using GnuPG for Windows
https://www.gpg4win.org/doc/en/gpg4win-compendium.html
How to: Use PGP for Windows

Google - Sign in using App Passwords
https://support.google.com/mail/answer/185833?hl=en&rd=1
Mr. Nathan House PGP Fingerprint
http://www.stationx.net/nathan-house/
Software
Gpg4win
https://www.gpg4win.org/download.html
Thunderbird

Enigmail
https://www.enigmail.net/index.php/en/download

152. Tail - PGP & GPG
Websites
Mr. Nathan House PGP Fingerprint
http://www.stationx.net/nathan-house/

153. PGP & GPG Weaknesses
Websites
15 reasons not to start using PGP
http://secushare.org/PGP
What’s the matter with PGP?

154. Improving OpenPGP Security - Best Practices - Part 1
Websites
Riseup OpenPGP Best Practices
https://raw.githubusercontent.com/ioerror/duraconf/master/configs/gnupg/gpg.conf
OpenPGP Best Practices

155. Improving OpenPGP Security - Primary and Subkeys - Part 2
Websites
Improve the Security of Your OpenPGP Key by Using Subkeys
http://www.connexer.com/articles/openpgp-subkeys
CREATING THE PERFECT GPG KEYPAIR
https://alexcabal.com/creating-the-perfect-gpg-keypair/
Using OpenPGP subkeys in Debian development
https://wiki.debian.org/Subkeys
Anatomy of a GPG Key
https://davesteele.github.io/gpg/2014/09/20/anatomy-of-a-gpg-key/
Software
GPG Suite
https://gpgtools.org/

156. Improving OpenPGP Security - Smartcards/Yubikey - Part 3
Websites
Using GPG with Smart Cards
https://www.jfry.me/articles/2015/gpg-smartcard/
Software
yubikey-neo-manager
https://developers.yubico.com/yubikey-neo-manager/Releases/
Hardware
Smartcard The OpenPGP card
http://g10code.com/p-card.html
Kernel Concepts

YUBIKEY NEO AND OPENPGP
https://www.yubico.com/2012/12/yubikey-neo-openpgp/

157. Email Tracking & Exploits
Websites
Email Privacy Tester
https://www.emailprivacytester.com/
#BadWinmail: The “Enterprise Killer” Attack Vector in Microsoft Outlook

Thunderbird - Remote Content in Messages
https://support.mozilla.org/en-US/kb/remote-content-in-messages
Fight Spam and Protect Your Privacy by Disabling Remote Content in Apple Mail

Video
#BadWinmail Demo

158. Email Anonymity & Pseudonymity
Websites
Anonymous One-Time Email Addresses
https://anonbox.net/
Temporary Email service
http://getairmail.com/
The disposable mailbox
http://dontmail.net/
Temporary e-mail
http://www.migmail.net/
Free Public Email
https://mailinator.com/
Disposable Temporary E-Mail Address
https://www.guerrillamail.com/
Anonymous email service
http://www.mytrashmail.com/
Throwaway e-mail accounts
http://www.tempinbox.com
Disposable email service
https://www.trash-mail.com/en/
Random email address
http://www.dispostable.com/
Send Anonymous Emails: 20 Sites To Keep Your Identity Hidden

159. TorBirdy
Software
TorBirdy

TorBirdy

160. Remailers
Websites
Dizume remailer
https://dizum.com/remailer.html
Paranoia remailer
http://remailer.paranoici.org/
Is-Not-My-Name Nymserver
http://is-not-my.name/
alt.anonymous.messages
https://groups.google.com/forum/#!forum/alt.anonymous.messages
Yardbird’s Effective Usenet Tradecraft DEC 1ST, 2013 Survival in an Extremely Adversarial Environment
http://grugq.github.io/blog/2013/12/01/yardbirds-effective-usenet-tradecraft/
de-anonymizing alt.anonymous.messages
https://ritter.vg/blog-deanonymizing_amm.html
Nymservers
https://www.whonix.org/wiki/Nymservers
Mixmaster
https://www.whonix.org/wiki/Mixmaster
Install Mixmaster
https://labs.riseup.net/code/issues/8225
Software
Mixmaster remailer protocol
http://mixmaster.sourceforge.net/
QuickSilver Anonymous Remailer Client
https://www.quicksilvermail.net/
Mixminion Type III Anonymous Remailer
http://mixminion.net/
mixgui
https://github.com/cryptodotis/mixgui
Package: mixmaster
https://packages.debian.org/stable/mail/mixmaster
Videos
DEF CON 21 - Tom Ritter - De Anonymizing Alt Anonymous Messages
https://www.youtube.com/watch?v=l5JBMyxvuH8

161. Choosing an Email Provider
Websites
CHOOSING PRIVATE & SECURE EMAIL | WHAT TO LOOK FOR
https://thetinhat.com/tutorials/messaging/choosing-email.html
Google 2-Step Verification
https://www.google.com/landing/2step/
Google gives Gmail a major security boost in bid to stop spy snooping
http://www.dailymail.co.uk/sciencetech/article-2585608/Google-gives-Gmail-security-boost-bid-stop-spy-snooping.html
Mandatory Data Retention
https://www.eff.org/issues/mandatory-data-retention
Email Privacy Tester
https://www.emailprivacytester.com/
Tutanota encrypted mailbox
https://www.tutanota.com/
Openmailbox
https://www.openmailbox.org/
Posteo email, calendar and address book
https://posteo.de/en
CounterMail
https://countermail.com/
StartMail
https://www.startmail.com/
Kolab
https://kolabnow.com/
CryptoHeaven
https://www.cryptoheaven.com/
Neomailbox
https://neomailbox.net
runbox
https://secure.runbox.com/
mailbox.org
https://mailbox.org/en/
https://ruggedinbox.com/

162. Email Alternatives
Websites
I2P
https://en.wikipedia.org/wiki/I2P
I2P-bote and Thunderbird setup tutorial
https://thetinhat.com/tutorials/messaging/i2p-bote-thunderbird.html
Bitmessage
https://bitmessage.org/wiki/Main_Page
Software
Retroshare
http://retroshare.sourceforge.net/
Confidant Mail
https://www.confidantmail.org/
Reports
Bitmessage
https://bitmessage.org/bitmessage.pdf
https://pond.imperialviolet.org/

  • server not found

164. An Introduction to Instant Messengers
Websites
Secure Messaging Guide
https://www.eff.org/secure-messaging-scorecard
Comparison of instant messaging clients
https://en.wikipedia.org/wiki/Comparison_of_instant_messaging_clients
Secure Messaging Apps Comparison
https://www.securemessagingapps.com/

165. Instant Messenger - Signal
Websites
How to: Use Signal on iOS
https://ssd.eff.org/en/module/how-use-signal-ios
How to: Use Signal for Android
https://ssd.eff.org/en/module/how-use-signal-android
SIGNAL AUDIT REVEALS PROTOCOL CRYPTOGRAPHICALLY SOUND
https://threatpost.com/signal-audit-reveals-protocol-cryptographically-sound/121892/
Software
Open Whisper Systems
https://whispersystems.org/
Andoird – Signal
https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms
iOS - Signal
https://itunes.apple.com/app/id874139669

166. Instant Messengers - Chatsecure
Websites
How to: Install and Use ChatSecure
https://ssd.eff.org/en/module/how-install-and-use-chatsecure
Software
ChatSecure Encrypted Messenger for iOS
https://chatsecure.org/

167. Instant Messengers - Cryptocat
Software
Cryptocat
https://crypto.cat/

168. Instant Messengers - Ricochet
Software
Ricochet
https://ricochet.im/

169. Instant Messengers - Other
Software
Kontalk
http://kontalk.org/
Conversations (Jabber / XMPP)
https://play.google.com/store/apps/details?id=eu.siacs.conversations

170. Video and Voice Messengers - Linphone
Websites
Free SIP service
https://www.linphone.org/free-sip-service.html
User guide
https://www.linphone.org/user-guide.html
Software
Open Whisper Systems
https://whispersystems.org/
Linphone
https://www.linphone.org/

171. Video and Voice Messengers - Jitsi
Software
Jitsi
https://jitsi.org/

173. Video and Voice Messengers - Other
Software
Ring
https://ring.cx/
Tox
https://tox.chat/
Comparison of VoIP software
https://en.wikipedia.org/wiki/Comparison_of_VoIP_software