🌐 Owlmail.cc - Anonymous Email ' No Logs ' No JavaScript

[examplens]

Well, I can't access the clearnet site from Chrome, while I can through Firefox, but after additional approval.

You cannot visit owlmail.cc right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.

The onion site is also offline on my side. Using links from the OP.

[CryptoYar]

[...]

Same problem here, as well. Landed on the site, and only saw sign-in option, no sign pointing to sign-up. Looked for few minutes for a link/ button before giving up. May simply be a problem moving around the website. This is a simple ease of use issue for those who wish to actually use the service, so I think it is worth waiting for the OP or team to explain. Hopefully this will be fixed, the most simple entry point for a service that is supposed to be about privacy and no JavaScript should not be confusing.

[ovcijisir]

Is this just me or someone else has also this message before accessing website:



I used Chrome browser on Android device.

BTW. I also didn't have any sign up button, just option to sign in.

[icopress]

The site is under attack. Everything should be fine today/tomorrow.

[joker_josue]

The site is under attack. Everything should be fine today/tomorrow.

I find it strange that lately these types of websites, especially those offering new services, are so quickly coming under attack.

Don't you think so?

[snowpega]

The site is under attack. Everything should be fine today/tomorrow.

Noted!

Last time, when I tried to use the service, I could not use it due to some technical issues.
And I also mentioned that problem with the community here in the ANN thread. Well, good to see an update from your side. Will try this service again whenever things get well, or the website starts to work fully functionally. And thanks for the update.

[TryNinja]

I find it strange that lately these types of websites, especially those offering new services, are so quickly coming under attack.

Don't you think so?

The internet is fundamentally broken so it's very easy to attack a website.

Even theymos has said that before, when fightning attacks on bitcointalk. We don't have DDoS protection at the network level, so everyone has to use a provider like Cloudflare or have to worry every day about how to keep the website online.

[Pmalek]

Sadly, it didn't take long for the service to get attacked and go offline. Considering that Owlmail is relatively new, I would prefer to wait with using it for anything I deem too important to lose for whatever reason. Let's see if it's still going to be around in one or two years and if it reaches any popularity within the community.

[LoyceV]

I find it strange that lately these types of websites, especially those offering new services, are so quickly coming under attack.

We don't have DDoS protection at the network level, so everyone has to use a provider like Cloudflare or have to worry every day about how to keep the website online.

You're not allowed to create a privacy website without a man-in-the-middle to observe and log everything

Cloudflare is very probably an NSA honeypot

But, this doesn't look like a DDoS. The site only shows web server's default page.

[examplens]

But, this doesn't look like a DDoS. The site only shows web server's default page.

Only Chrome does not allow page loading, even ignoring the reported certificate error.
Firefox and Opera opened the login page for me. https://owlmail.cc/auth
At the same time, TOR opens the HTTP version, which only prints the Nginx welcome message.

To me, this looks more like a mess in the DNS and certificate setup.

Also, owlmail.cc server IP is listed on some spam blacklists


https://check.spamhaus.org/results/?query=SBL693164

[icopress]

Friends, the site is back to normal operation. 

[icopress]

Owlmail reported that the only way to combat the DDoS attack was to shut down the work (and restart the worker processes).

[NotATether]

Can I use this as a replacement for Proton Mail, theoretically?

I know that Proton has a lot of features like a full composer and multiple inboxes and stuff like that, but is this sort of service meant to be a temp mail provider, or can it actually replace my mailbox.

Not that I want to leave Proton Mail any time soon, but the thing is, the data handovers to governments are really spooky.

[Pmalek]

You have to love Owlmail's Terms of Service and Privacy Policy. I don't think I have ever read shorter ones anywhere.
I noticed that the only domain now is @owlmail.cc. What happened to the rest? You had like 15-20 different domains. Are those gone for good or will they be reinstated?

[joker_josue]

But, this doesn't look like a DDoS. The site only shows web server's default page.

Only Chrome does not allow page loading, even ignoring the reported certificate error.
Firefox and Opera opened the login page for me. https://owlmail.cc/auth
At the same time, TOR opens the HTTP version, which only prints the Nginx welcome message.

To me, this looks more like a mess in the DNS and certificate setup.

Also, owlmail.cc server IP is listed on some spam blacklists


https://check.spamhaus.org/results/?query=SBL693164

That's one of the biggest problems with this type of email service.
They are easily used for spam schemes.

This makes normal email use difficult, since many other services will classify emails from this service as spam, even when they are not.

[PX-Z]

Owlmail reported that the only way to combat the DDoS attack was to shut down the work (and restart the worker processes).

Shutting down the server is a wise move to prevent further strain from a ddos attack, especially to reduce server traffic overload. However, it also means temporarily halting the entire operation.

[LoyceV]

That's one of the biggest problems with this type of email service.
They are easily used for spam schemes.
This makes normal email use difficult, since many other services will classify emails from this service as spam, even when they are not.

That's the reason why most established email providers make it impossible to sign up anonymously, and from the ones that allow anonymous accounts, it's not possible to send email to established email services.
Would it be possible to solve this by charging a very small amount for each email? Let's say you pay $1 credit (in Monero for privacy) to be able to send 250 emails, that should be expensive enough to keep spammers away. I barely send any personal emails, so 250 is enough credit to last me for years.

The Internet is seriously flawed if everyone needs to huddle behind these huge centralized anti-DDoS companies in order to survive...

Ironically, websites have to hide behind DDoS protection, and the large majority of all email is spam. That's why we can't have nice things.

According to Email Tool Tester: 52% all email is spam, but they also put the number of daily emails at 376 billion. That would mean the average person on earth receives 22 legitimate emails per day, which is a lot more than I expected.

[joker_josue]

That's one of the biggest problems with this type of email service.
They are easily used for spam schemes.
This makes normal email use difficult, since many other services will classify emails from this service as spam, even when they are not.

That's the reason why most established email providers make it impossible to sign up anonymously, and from the ones that allow anonymous accounts, it's not possible to send email to established email services.
Would it be possible to solve this by charging a very small amount for each email? Let's say you pay $1 credit (in Monero for privacy) to be able to send 250 emails, that should be expensive enough to keep spammers away. I barely send any personal emails, so 250 is enough credit to last me for years.

Are you thinking about reviving Hashcash? 

Perhaps there should really be an email service where you have to buy credits (with bitcoin, of course) to send emails.
The problem is that all email services had to adopt the system. Otherwise, we would continue to be victims of spam coming from other sources.

Unless we created some kind of barrier to entry... What kind? 

According to Email Tool Tester: 52% all email is spam, but they also put the number of daily emails at 376 billion. That would mean the average person on earth receives 22 legitimate emails per day, which is a lot more than I expected.

The question is: what do they consider legitimate emails?
Is receiving a newsletter that you intentionally subscribed to considered a legitimate email?

I believe this scenario is considered a legitimate email, so I think that average of 22 emails per day is probably an underestimate.

[LoyceV]

Are you thinking about reviving Hashcash?  

I had to look it up, but to compete with my suggested 250 emails for a dollar, it means spending $0.004 in computational power per email. My VPS with 8 cores costs $0.025 per hour. To spend $0.004, it would take 10 minutes to send an email. Any reasonable amount of time to wait for people sending an email would at best be seconds, so it has to be 200 times faster (and cheaper). That would mean a spammer can still send 25,000 emails for a dollar. I don't think that's going to stop them.

The question is: what do they consider legitimate emails?

One order from Amazon can easily get me 10+ emails from Amazon and the shipping company. An order with a few items from AliExpress produces even more emails. They could be called them "legitimate", but I wouldn't mind not receiving them.

[joker_josue]

Are you thinking about reviving Hashcash?  

I had to look it up, but to compete with my suggested 250 emails for a dollar, it means spending $0.004 in computational power per email. My VPS with 8 cores costs $0.025 per hour. To spend $0.004, it would take 10 minutes to send an email. Any reasonable amount of time to wait for people sending an email would at best be seconds, so it has to be 200 times faster (and cheaper). That would mean a spammer can still send 25,000 emails for a dollar. I don't think that's going to stop them.

I could have just included the link. Those were the first steps that led to the creation of Bitcoin. 

I think that's why the idea of ​​paying for emails never really took off. Look, in the 90s this was talked about a lot, even Bill Gates spoke about the subject.

Do you think there was any way around this? This could be a very interesting step towards reducing spam, but no one has been able to devise a minimally effective model.