Published on: 2013-07-31T16:11:32+00:00
BitMail is a secure peer-to-peer email service that operates without relying on a central server. It utilizes the Echo Protocol to establish a fully decentralized email network. The system incorporates features such as key/repleo exchange, chat, and instant messaging. To ensure high levels of security, BitMail implements strong end-to-end multi-encryption using PGP/AES over SSL with libgcrypt. Additionally, the platform integrates with Libspoton and employs an extra layer of security called the GB-feature for emails.One notable aspect of BitMail is its approach to data retention. Messages are stored for only one week and have size limitations. The absence of traditional addresses means that users must grant permission by sharing a small file in order to receive messages, effectively eliminating spam. To further enhance security, BitMail leverages the Trusted Platform Module (TPM) chip. This hardware-based solution securely stores cryptographic keys and other sensitive data, ensuring protection against unauthorized access. By utilizing the TPM chip, BitMail can reliably destroy keys for data that may otherwise be un-erasable, particularly on SSD devices.BitMail was developed by Adam Langley, a respected figure in the field of cryptography. The platform is written in Go and operates over Tor to provide resistance against traffic analysis. It prioritizes forward security and takes advantage of the NVRAM in a TPM chip to destroy keys, thus addressing the issue of erasing data on modern disks. These disks often employ log structured file systems and firmware remapping, making it challenging to securely delete information.However, concerns have arisen regarding a similar software called "GoldBug." Multiple posts from apparent sock accounts have been observed across various forums, including the Tor Project and GnuPG mailing lists. The similarity in names and timing of these posts raises doubts about the legitimacy of the GoldBug software. Thus, it is essential to exercise caution when considering alternative options to BitMail.In a separate email thread, Randolph D. discusses another secure peer-to-peer email system called Key/Repleo-Exchange. This system operates without a central server and uses the Echo Protocol to create a fully decentralized email network. It offers built-in chat and instant messaging functionalities, employing strong end-to-end multi-encryption with PGP/AES over SSL via libgcrypt. The integration of Libspoton enhances security, and an additional layer called the GB-feature provides added protection for emails. Notably, this system avoids data retention and does not rely on a web of trust. The software is open-source under the BSD license.Randolph D. is actively seeking someone with a server to help implement the Key/Repleo-Exchange system. However, the emergence of multiple posts from sock accounts discussing a similarly named software, GoldBug, raises concerns about its legitimacy. It is crucial to exercise caution and carefully evaluate the credibility of any alternative systems to ensure the highest level of security and privacy.
Updated on: 2023-08-01T05:27:36.990090+00:00