networkimprov / mnm

mnm implements TMTP protocol. Let Internet sites message members directly, instead of unreliable, insecure email. Contributors welcome! (Server)
https://mnmnotmail.org
Mozilla Public License 2.0
227 stars 10 forks source link

more security and privacy with mnm: tor & mnm #18

Closed ghost closed 1 year ago

ghost commented 1 year ago

Hi everyone.

I was thinking today how to make the mnm protocol more secure, private and anonymous. One of my concerns with the mnm protocol is its security, privacy and anonymity. The architecture of mnm is different from email, in that sense my concern would be that companies directly collect the user's IP address (and therefore also their approximate location) - this concerns me to some extent as there are general user data protection laws. In relation to this question and also a concern of mine comes the idea of using tor routes, which allow you not to know the initial or final ip of any user on the network.

I believe this can be an advantage to add a layer of security, privacy and anonymity for mnm. I believe that with tor-mnm it is possible to have higher security than email. Things like e-mail use pgp(Pretty Good Privacy) which is for encrypting messages, and there are temporary e-mails for sending and receiving messages, as well as tor routes to hide the starting or ending ip of the user.

As mnm is a different protocol from email, I wonder if there would be a need to have the route: tor in mnm. So with this hide the user initial or final ip, and thus ensure greater security, privacy and security with mnm.

An alternative to the tor route - is to use things like proxy, vpn. But things like proxy, vpn depend on your provider's trust. This trust in the provider - this also involves to some extent: privacy, security and anonymity too. In the case of the tor route, all ips change with each connection or network node.

About message encryption, which is another topic here. I would like to know if there is a pgp(Pretty Good Privacy) in mnm to send and receive encrypted messages.

These are questions and not an feature request. What do you all think of this idea of ​​tor routes in mnm and the idea of ​​using pgp(Pretty Good Privacy) encryption in mnm?