🌐 Owlmail.cc - Anonymous Email ' No Logs ' No JavaScript

[LoyceV]

Do you think there was any way around this? This could be a very interesting step towards reducing spam, but no one has been able to devise a minimally effective model.

I don't think we'll see it in our lifetime. I used to email a lot, nowadays it's mostly used for automated notifications. Messengers replaced email, and they barely have spam because they're closed systems.
Email's greatest strength is that it's an open system, and that has become it's greatest weakness. I bet we've all seen legitimate emails disappear into the spam box, while we've seen spam in our inbox. Most VPS providers have port 25 blocked, and even if it's open, chances are the server's IP address is already blacklisted.

[TryNinja]

That's one of the biggest problems with this type of email service.
They are easily used for spam schemes.

This makes normal email use difficult, since many other services will classify emails from this service as spam, even when they are not.

You actually need to provide a small proof-of-work challenge to unblock sending emails with Owlmail. That's not going to stop spammers, just like it does not stop spammers on other email providers, but it makes it a bit more difficulty to run an operation with hundreds of botted emails.

The actual reasoning from spamhaus is typical: "Based on research, analysis of network data, our telemetry, intelligence sources and our experience, it is Spamhaus's considered opinion that AS205775 is operated for the purpose of proliferating bulletproof hosting and cybercrime operations"

Basically: it does not track the heck out of you, so it's probably used for crime. Block it!

[snowpega]

I just gave it another try to test the OwlMail service.
This time I successfully registered an email, and then I signed up with those details.
But there is still a problem using the service. I am seeing an "Invalid CSRF token" message in the top left corner of the screen. Is anyone else facing the same as me?

[TryNinja]

I just gave it another try to test the OwlMail service.
This time I successfully registered an email, and then I signed up with those details.
But there is still a problem using the service. I am seeing an "Invalid CSRF token" message in the top left corner of the screen. Is anyone else facing the same as me?

Nothing wrong on my end.

You should send them an email with a screenshot: support@owlmail.cc

(Taken from https://owlmail.cc/contact)

[snowpega]

...

Nothing wrong on my end.

You should send them an email with a screenshot: support@owlmail.cc

(Taken from https://owlmail.cc/contact)

I was just going to report it through the email you mentioned to me.

But before that, I tried to sign in another time before reporting it, and I successfully tested the service. One thing I am wondering is that when I was sending an email to a person, it asked me to complete the SMTP challenge before I sent the email because I was blocked using the service, and when I completed the challanged i sent the email successfully.

My question is whether SMTP can reveal my identity to the service? Like my network location/IP address or any other private data?

[examplens]

My question is whether SMTP can reveal my identity to the service? Like my network location/IP address or any other private data?

Yes, it is possible to recognize enough information about you as a sender. IP address, hostname, OS..
Most of it is in email headers.
Of course, VPN+TOR is the best solution here as well.

[TryNinja]

My question is whether SMTP can reveal my identity to the service? Like my network location/IP address or any other private data?

If you're worried, use a VPN.

That's the case when connecting to any server, be it through SMTP or a website through your browser.

[CryptoYar]

[...]

It is likely that this SMTP challenge is not identity verification process, but is anti spam or speed limiting step. You should not have to provide personal information to complete it. However, regardless of SMTP, your IP will be visible to their servers at network level if you are using OwlMail through standard connection, without Tor. This is why there is Tor mirror. Onion address is more complete solution than just what the service does with SMTP headers is to provide true hidden identity. Worth to raise directly with their support for a final technical answer.

[TryNinja]

It is likely that this SMTP challenge is not identity verification process, but is anti spam or speed limiting step.

It definitely has nothing to do with any identity verification. It just runs a Proof-of-Work challenge on your device for a couple of seconds.

That's what Bitcoin mining does, but in a much higher scale and difficulty.

[snowpega]

[...]

It is likely that this SMTP challenge is not identity verification process, but is anti spam or speed limiting step. You should not have to provide personal information to complete it. However, regardless of SMTP, your IP will be visible to their servers at network level if you are using OwlMail through standard connection, without Tor. This is why there is Tor mirror. Onion address is more complete solution than just what the service does with SMTP headers is to provide true hidden identity. Worth to raise directly with their support for a final technical answer.

Yes, this is so obvious as the kind of identity I am talking about, your IP address or browser fingerprints and other information like that and nothing else. Because this information is your identity in the digital space. As sharing such information can be a problem for a person who is more concerning in matter of privacy and security. I am not talking about me in this case, as I have already passed SMTP and tested this service successfully. I am just talking about the fact that others can feel or face while using it.

[CryptoYar]

[...]

I think that is fair explanation. True signals of identity in digital world are IP address and browser fingerprints, and OwlMail setup addresses both of these concerns. No JavaScript approach makes it much harder to fingerprint people, and Tor mirror protects against IP exposure on network level. Onion address is used to address both at once, and that truly provides most complete privacy solution to any serious hidden user. Thankfully testing went well. All good points to keep in mind when thinking of the service.

[xmrbro]

I will test it with pleasure. Looks good.
Totally free, I don't even see any ads on the site, which makes me wonder how such a service is maintained?

[TryNinja]

I will test it with pleasure. Looks good.
Totally free, I don't even see any ads on the site, which makes me wonder how such a service is maintained?

At the moment I don't think they had thousands of users, so expenses are probably very limited.

In the future, I could see them going the way of cock.li and living of donations from privacy oriented users. Those guys know there is no such thing as free lunch so they support what they appreciate. Better than the "free" gmail that tracks every single aspect of your digital life.

[aoluain]

Can I use this as a replacement for Proton Mail, theoretically?

I know that Proton has a lot of features like a full composer and multiple inboxes and stuff like that, but is this sort of service meant to be a temp mail provider, or can it actually replace my mailbox.

Not that I want to leave Proton Mail any time soon, but the thing is, the data handovers to governments are really spooky.

I was just thinking the exact same thing when I came across this service.

I'm with Proton too for a number of years, the service is excellent and a very extensive mail service
with plenty of tools etc.

But the idea of my details being leaked to any law enforcement agency or government is something
I dont want, not that I am a criminal but I choose to leave GoogleMail many years ago for a privacy
based provider.

https://freedom.press/digisec/blog/proton-mail-is-not-for-anonymity/

Privacy-focused Proton offers end-to-end encrypted productivity tools, such as Proton Mail and Proton Drive.
These tools are similar to Gmail and Google Drive, but the Switzerland-based company markets itself on the
security and privacy advantages afforded by Swiss privacy laws, which prevent it from sharing users’ information
with foreign law enforcement. But according to 404 Media, Proton provided Swiss authorities with data associated
with a previously unidentified activist’s account, and in turn, authorities provided this data to the FBI.

So yea a totally Anonymous Email ' No Logs ' No JavaScript is something I would be interested in.

[CryptoYar]

[...]

[...]

For many Proton Data handover case was warning call. While Swiss privacy laws seem comforting, they do not provide any help when company follows local laws and rules, and then provides them to foreign agencies.
That is why OwlMail is a no-log email service. Storage of nothing, hand over of nothing. No matter what any government power asks.
Truthfully, when it comes to replacing Proton, it is dependent on what you use it for. OwlMail is designed to be nameless, lightweight and simple, not feature heavy.
For sensitive communication messages where namelessness is more important concern than ease of use, OwlMail is good to have in addition to whatever your main provider is. Range of tools for range of threats.

[inspace]

🚀 Friends, we're excited to announce that a new raffle has just been launched, and we'd love for you to join in!

🌐 Owlmail.cc 🎁 FREE RAFFLE 🎁 Prize $30

• Rules/Prizes:

➥ Pick a SLOT! 🎯
➥ The winner will receive a prize of $30 in BTC 🎁
➥ After selecting a block, we will use the BitList tool to determine the winner.

Good luck to all participants!

[xmrbro]

I registered, everything is cool, but I don't have SMTP to use the mail on my local client.

[TryNinja]

I registered, everything is cool, but I don't have SMTP to use the mail on my local client.

You need to enable SMTP on your settings, by doing a small Proof-of-Work challenge (just 5 seconds on your browser)

[snowpega]

My question is whether SMTP can reveal my identity to the service? Like my network location/IP address or any other private data?

Yes, it is possible to recognize enough information about you as a sender. IP address, hostname, OS..
Most of it is in email headers.
Of course, VPN+TOR is the best solution here as well.

Thanks for the valuable suggestion.

Well, I don't remember correctly, but as far as I remember, there was another option to pass SMTP, which was an offline method.
Do you know what the logic behind it is? And how does it work? So that users will be able to send emails....

[examplens]

Well, I don't remember correctly, but as far as I remember, there was another option to pass SMTP, which was an offline method.
Do you know what the logic behind it is? And how does it work? So that users will be able to send emails....

I don't think it is possible to send a digital message offline without a direct meeting between the sender and the recipient. You can create it, but not send it.
I think it's impossible to send smtp 100% anonymously without tor or vpn.