www.noreply.org :: TLS
 
 

SMTP - TLS

Transport Layer Security (similar to SSL) brings forward secrecy to Internet Email by encrypting SMTP traffic.

Even though usual remailer mail is already encrypted, TLS adds security because the key used in TLS sessions usually is ephemeral - i.e. it only exists for seconds and is destroyed immediatly after use. Whether or not short-lived keys are used depends on the cipher suite chosen. (The EDH (Ephemeral Diffie-Hellman) ciphers use ephemeral keys.)

Ephemeral keys make it impossible to decrypt data which was eavesdropped at one time by compromising a remailer's key later.

Since remailer keys are valid for weeks, sometimes years, this makes remailing more secure.

The submission column indicates that a mailserver acceps mails on port 587 (submission). The smtps column that it accepts SSL connections on port 465 (smtps) for use with stunnel and similar. Some hosts also accept normal connections on port 2525 - this is indicated in the column 2525. Please note that some hosts may enforce the use of TLS on the submission port.

Stunnel can do STARTTLS using -n smtp or with protocol = smtp in your config file, depending on your version.

See the Encrypted Email - TLS/SSL on mixmin for a howto on using stunnel on Windows with Quicksilver and JBN2.

remailermail exchangerpriorityTLSsubmissionsmtps2525error/warning
anon <anon@anonusa.net>
  anonusa.net 0 YES
ECDHE-RSA-AES256-GCM-SHA384
yes yes
ECDHE-RSA-AES256-GCM-SHA384
no
austria <mixmaster@remailer.privacy.at>
  remailer.privacy.at 0 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no
banana <banana@mixmaster.mixmin.net>
  fleegle.mixmin.net 10 YES
ECDHE-RSA-AES256-GCM-SHA384
yes no yes
brabus <brabus@remailer.org.uk>
  brabus.remailer.org.uk 0 no yes no no
broken <broken@mixmaster.mixmin.net>
  fleegle.mixmin.net 10 YES
ECDHE-RSA-AES256-GCM-SHA384
yes no yes
congeries <mix@congeries.org.uk>
  congeries.org.uk 9 YES
ECDHE-RSA-AES256-GCM-SHA384
yes no no
  rhea.easily.co.uk 10 no no no no
devurandom <mixmaster@anonymitaet-im-inter.net>
  mail.anonymitaet-im-inter.net 10 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no
dizum <remailer@dizum.com>
  smtp.dizum.com 10 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no
eurovibes <mixmaster@eurovibes.org>
  mara.eurovibes.org 10 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no
fotonl1 <mixmaster@foto.nl1.torservers.net>
  foto.nl1.torservers.net 0 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no
freierede <mixmaster@freie-re.de>
  freie-re.de 0 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no
frell <godot@remailer.frell.eu.org>
  bxcp6j2uuphwunrg.onion 5 N/A no no no query failed: NXDOMAIN
  mail2.frell.eu.org 10 YES
ECDHE-RSA-AES256-GCM-SHA384
yes yes
ECDHE-RSA-AES256-GCM-SHA384
yes
frell2 <godot2@remailer.frell.eu.org>
  bxcp6j2uuphwunrg.onion 5 N/A no no no query failed: NXDOMAIN
  mail2.frell.eu.org 10 YES
ECDHE-RSA-AES256-GCM-SHA384
yes yes
ECDHE-RSA-AES256-GCM-SHA384
yes
hermetix <mix@hermetix.org>
  mail.hermetix.org 10 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no
holland <mix@holland.remailer.nl>
  holland.remailer.nl 0 no yes no no
hsub <hsub@mixmaster.mixmin.net>
  fleegle.mixmin.net 10 YES
ECDHE-RSA-AES256-GCM-SHA384
yes no yes
init <mix@mail.killinit.pw>
  mail.killinit.pw 10 YES
ECDHE-RSA-AES256-GCM-SHA384
yes no yes
jeremy <mix@anemone.mooo.com>
  anemone.mooo.com 0 YES
ECDHE-RSA-AES256-GCM-SHA384
yes yes
ECDHE-RSA-AES256-GCM-SHA384
yes
kreti <mixmaster@hoi-polloi.org>
  mail.hoi-polloi.org 10 YES
DHE-RSA-AES256-GCM-SHA384
yes yes
DHE-RSA-AES256-GCM-SHA384
no
kroken <remailer@kroken.de.eu.org>
  rooty.uni-boeblingen.de 123 YES
DHE-RSA-AES256-SHA
no no no
lisbeth <mix@loadmx.net>
  placid.loadmx.net 0 YES
ECDHE-RSA-AES256-GCM-SHA384
yes no yes
lulunga <mixmaster@remailer.cypherpunks.to>
  remailer.cypherpunks.to 100 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no
m2n <mix@mail.m2n.works>
  mail.m2n.works 10 YES
ECDHE-RSA-AES256-GCM-SHA384
yes no yes
paranoia <mixmaster@remailer.paranoici.org>
  remailer.paranoici.org 10 YES
ECDHE-RSA-AES256-GCM-SHA384
yes yes
ECDHE-RSA-AES256-GCM-SHA384
no
  mx5.investici.org 50 YES
ECDHE-RSA-AES256-GCM-SHA384
yes yes
ECDHE-RSA-AES256-GCM-SHA384
no
  mx1.investici.org 50 YES
ECDHE-RSA-AES256-GCM-SHA384
yes yes
ECDHE-RSA-AES256-GCM-SHA384
no
redjohn <remailer@redjohn.net>
  mail.redjohn.net 0 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no
roance <mixmaster@roance.net>
  roxy.roance.net 0 YES
ECDHE-RSA-AES256-GCM-SHA384
yes no yes
senshi <senshiremailer@gmx.de>
  mx00.emig.gmx.net 10 YES
DHE-RSA-AES256-GCM-SHA384
no no no
  mx01.emig.gmx.net 10 YES
DHE-RSA-AES256-GCM-SHA384
no no no
slow <slowmix@mixmaster.mixmin.net>
  fleegle.mixmin.net 10 YES
ECDHE-RSA-AES256-GCM-SHA384
yes no yes
starboard <starboard@spinebox.net>
  terranova.spinebox.net 10 YES
ECDHE-RSA-AES256-GCM-SHA384
no no no

Built at Fri Jan 6 12:02:23 2017.

 
web@palfrader.org - Valid HTML 4.01!