🌐 Owlmail.cc - Anonymous Email ' No Logs ' No JavaScript

[LoyceV]

Do you think there was any way around this? This could be a very interesting step towards reducing spam, but no one has been able to devise a minimally effective model.

I don't think we'll see it in our lifetime. I used to email a lot, nowadays it's mostly used for automated notifications. Messengers replaced email, and they barely have spam because they're closed systems.
Email's greatest strength is that it's an open system, and that has become it's greatest weakness. I bet we've all seen legitimate emails disappear into the spam box, while we've seen spam in our inbox. Most VPS providers have port 25 blocked, and even if it's open, chances are the server's IP address is already blacklisted.

[TryNinja]

That's one of the biggest problems with this type of email service.
They are easily used for spam schemes.

This makes normal email use difficult, since many other services will classify emails from this service as spam, even when they are not.

You actually need to provide a small proof-of-work challenge to unblock sending emails with Owlmail. That's not going to stop spammers, just like it does not stop spammers on other email providers, but it makes it a bit more difficulty to run an operation with hundreds of botted emails.

The actual reasoning from spamhaus is typical: "Based on research, analysis of network data, our telemetry, intelligence sources and our experience, it is Spamhaus's considered opinion that AS205775 is operated for the purpose of proliferating bulletproof hosting and cybercrime operations"

Basically: it does not track the heck out of you, so it's probably used for crime. Block it!

[snowpega]

I just gave it another try to test the OwlMail service.
This time I successfully registered an email, and then I signed up with those details.
But there is still a problem using the service. I am seeing an "Invalid CSRF token" message in the top left corner of the screen. Is anyone else facing the same as me?

[TryNinja]

I just gave it another try to test the OwlMail service.
This time I successfully registered an email, and then I signed up with those details.
But there is still a problem using the service. I am seeing an "Invalid CSRF token" message in the top left corner of the screen. Is anyone else facing the same as me?

Nothing wrong on my end.

You should send them an email with a screenshot: support@owlmail.cc

(Taken from https://owlmail.cc/contact)

[snowpega]

...

Nothing wrong on my end.

You should send them an email with a screenshot: support@owlmail.cc

(Taken from https://owlmail.cc/contact)

I was just going to report it through the email you mentioned to me.

But before that, I tried to sign in another time before reporting it, and I successfully tested the service. One thing I am wondering is that when I was sending an email to a person, it asked me to complete the SMTP challenge before I sent the email because I was blocked using the service, and when I completed the challanged i sent the email successfully.

My question is whether SMTP can reveal my identity to the service? Like my network location/IP address or any other private data?

[examplens]

My question is whether SMTP can reveal my identity to the service? Like my network location/IP address or any other private data?

Yes, it is possible to recognize enough information about you as a sender. IP address, hostname, OS..
Most of it is in email headers.
Of course, VPN+TOR is the best solution here as well.

[TryNinja]

My question is whether SMTP can reveal my identity to the service? Like my network location/IP address or any other private data?

If you're worried, use a VPN.

That's the case when connecting to any server, be it through SMTP or a website through your browser.

[CryptoYar]

[...]

It is likely that this SMTP challenge is not identity verification process, but is anti spam or speed limiting step. You should not have to provide personal information to complete it. However, regardless of SMTP, your IP will be visible to their servers at network level if you are using OwlMail through standard connection, without Tor. This is why there is Tor mirror. Onion address is more complete solution than just what the service does with SMTP headers is to provide true hidden identity. Worth to raise directly with their support for a final technical answer.