WEBVTT 00:01.300 --> 00:06.640 Now in the previous lectures, we covered different types of email providers. 00:06.790 --> 00:13.000 Within each type there are a number of providers, and each one of these providers could have their 00:13.000 --> 00:14.740 own pros and cons. 00:15.530 --> 00:21.650 Therefore, at this stage I wouldn't blame you if you feel a little bit confused or find it a little 00:21.650 --> 00:24.890 bit difficult to pick, which is best for you. 00:25.220 --> 00:31.340 Now, the reason why I covered so many different types, because I think each one of these types is 00:31.340 --> 00:37.730 different from the other and one all of these types can be very, very useful because you'll be able 00:37.730 --> 00:41.480 to pick which is best based on your scenario. 00:42.020 --> 00:49.160 So as I mentioned at the start of the section, when you want to pick an email service, you want to 00:49.160 --> 00:51.340 keep two main things in your mind. 00:51.350 --> 00:55.430 Why do you want to use this service and what's your threat model? 00:55.430 --> 00:59.990 Who might be trying to anonymize you or discover your location? 01:00.740 --> 01:07.760 Keeping that in mind and in order to revise and make it easier for you to pick a good email provider 01:07.760 --> 01:15.890 based on your scenario, I made this simple table that summarizes everything we talked about so far. 01:16.610 --> 01:24.620 Now, the main thing you keep in mind is as we go down in this table, the provider type will be more 01:24.620 --> 01:27.950 private, more secure, and therefore more anonymous. 01:27.950 --> 01:30.470 But it will have less features. 01:30.470 --> 01:35.600 So like I said, it all comes down to why you want to use it for and what's your threat model. 01:36.440 --> 01:43.760 So the first type of providers we had look on where the common services such as Gmail, Hotmail, Yahoo 01:43.760 --> 01:45.050 Mail and all of that. 01:45.620 --> 01:49.910 These email providers can send emails to the clear net and to the darknet. 01:49.910 --> 01:50.870 As we saw. 01:51.050 --> 01:54.590 They all use JavaScript so they are less secure. 01:54.920 --> 02:00.590 We know that they heavily track you and log everything you do, so they are not private. 02:00.710 --> 02:05.690 Like I said, if you really want to use this, you want to make sure that you use fake identity and 02:05.690 --> 02:12.860 never communicate with your own email addresses or any other email addresses that can link to your real 02:12.860 --> 02:13.790 identity. 02:14.630 --> 02:20.960 They do not offer a hidden onion service link and they do use HTTPS encryption. 02:21.440 --> 02:22.940 So these were the base. 02:23.180 --> 02:30.470 Then the other example we had was the temporary emails, which in my opinion can be very, very useful 02:30.470 --> 02:31.970 in so many scenarios. 02:31.970 --> 02:35.600 Like we said, they don't require any personal information to sign up. 02:35.600 --> 02:36.890 There is no sign up. 02:36.890 --> 02:42.680 You literally get an inbox straight away and you can use it so you can have unlimited number of emails 02:42.680 --> 02:45.050 because you're never asked to sign up. 02:45.320 --> 02:50.300 They are more private and more anonymous than the normal email providers. 02:50.300 --> 02:54.590 They do use JavaScript, so again, they're not as secure as possible. 02:54.590 --> 02:56.330 They might be log in you. 02:56.330 --> 03:00.170 But the cool thing is some of them offer a hidden service. 03:00.170 --> 03:04.070 So you never need to exit the Tor network when you're using them. 03:04.070 --> 03:08.330 And they also use HTTPS to add an extra layer of encryption. 03:08.330 --> 03:13.430 So this is a really, really good option if you know what you're doing, if you just want a temporary 03:13.430 --> 03:19.010 email to send, to send something quickly, to receive something quickly, and this and this will actually 03:19.010 --> 03:21.170 be destroyed once you're done with it. 03:21.170 --> 03:23.720 So it can be anonymous enough. 03:23.720 --> 03:29.720 It can be great in so many scenarios, again, if you're trying to just bypass a registration form and 03:29.720 --> 03:30.440 so on. 03:31.690 --> 03:38.680 The next email providers that we had to look on were the privacy focused or what I called hybrid services 03:38.680 --> 03:42.610 so they can communicate with clear net and darknet services. 03:42.610 --> 03:45.070 They they have a lot of nice features. 03:45.370 --> 03:51.790 What really differentiates them from the common services such as Gmail, Yahoo and all of that is the 03:51.790 --> 03:53.440 fact that they will not track you. 03:53.440 --> 03:55.750 They won't be log in your movement. 03:56.050 --> 03:58.330 They don't require personal information. 03:58.330 --> 04:00.730 Like I said, these are privacy focused. 04:01.600 --> 04:04.210 Some of them will even have a darknet address. 04:04.210 --> 04:09.730 So again, you can access them without exiting the Tor network, which will improve your privacy and 04:09.730 --> 04:10.690 anonymity. 04:11.110 --> 04:13.690 Some of them use end to end encryption again. 04:13.690 --> 04:16.780 In our example, Protonmail uses end to end encryption. 04:16.780 --> 04:21.790 So like I said, even if they wanted to see what you're doing, they won't be able to see it. 04:22.300 --> 04:27.430 The only problem with these providers is the fact that they are real, proper companies. 04:27.430 --> 04:34.210 They have servers on the clear net and they have complied to court orders and disclosed information 04:34.210 --> 04:36.130 about their users previously. 04:36.730 --> 04:41.920 Now, like I said, they keep no logs and they require no personal information and they use end to end 04:41.920 --> 04:42.610 encryption. 04:42.610 --> 04:47.650 So the amount of information they can share is limited because they don't know a lot. 04:47.650 --> 04:54.280 But again, the fact that they do comply sometimes puts them in second place in terms of anonymity. 04:55.120 --> 04:59.410 The other thing that you want to keep in mind is the fact that they require JavaScript. 04:59.410 --> 05:04.930 So when you use them, you need to have your security settings in the Tor browser to medium, which 05:04.930 --> 05:06.820 is not very secure. 05:06.820 --> 05:13.930 But if you're using Protonmail or any other reputable email provider, and if that email provider is 05:13.930 --> 05:20.050 used in https, then it is secure enough to enable JavaScript and the medium level. 05:20.230 --> 05:24.820 But again, this is still not as secure and as anonymous as possible. 05:25.540 --> 05:31.570 This led us to the last email providers which are completely available on the darknet. 05:31.600 --> 05:33.910 They have no clear net addresses. 05:34.300 --> 05:37.870 So again, when you use them, you never exit the terror network. 05:37.870 --> 05:40.720 This increases your privacy and anonymity. 05:41.080 --> 05:47.740 They also do not require JavaScript, so you can put your security settings to the highest where JavaScript 05:47.740 --> 05:53.980 and all of the other features of the browser are disabled that can be used to reduce your security or 05:54.220 --> 05:55.390 anonymize you. 05:55.780 --> 06:01.300 Some of these providers allow you to communicate with both clear net and Darknet addresses, such as 06:01.300 --> 06:01.900 Elude. 06:01.900 --> 06:08.170 And we also had an example of Tor Box, which is a provider that only allows you to communicate with 06:08.170 --> 06:09.430 Darknet addresses. 06:09.430 --> 06:15.610 Now this is great because like I said, it keeps you limited and it keeps you as anonymous as possible. 06:15.790 --> 06:19.270 Now it goes without saying that none of these services track you. 06:19.270 --> 06:22.990 None of them keep logs because they run as onion services. 06:22.990 --> 06:27.280 They make full use of the privacy provided by Tor. 06:27.280 --> 06:34.180 And on top of that, some providers such as ELUDE provides end to end encryption and even personally 06:34.180 --> 06:37.210 encrypt the storage that stores your emails. 06:38.340 --> 06:44.670 And again, because these are Darknet services, the location of their servers is unknown and they're 06:44.670 --> 06:51.810 less likely to comply with court orders or to get influenced by government agencies and so on. 06:52.840 --> 06:59.290 Now, like I said, the examples that I'm giving you in here, these are just single examples of the 06:59.290 --> 07:01.430 categories that we see here on the left. 07:01.450 --> 07:07.570 So do your own research if you want to learn more about each one of these categories and don't just 07:07.570 --> 07:09.190 take my word for granted. 07:09.190 --> 07:13.390 Go read the privacy policy, read the history of each of these companies. 07:13.390 --> 07:19.510 Make sure that this company or this provider is the best for you, for your scenario, and only then 07:19.510 --> 07:20.710 start using it.