The next type of e-mail services that I want to talk about are e-mail services that are focused on privacy
and anonymity.
So unlike temporary e-mails these are proper e-mail services that will give you a proper e-mail your
inbox will never expire.
You will sign up and log in with a password similar to the way you sign up and logon to the e-mail services
that you're familiar with.
Similar to Google and Hotmail they offer a lot of very useful features their user friendly.
So again all of this is similar to the services you're used to.
But unlike Gmail and Hotmail and all of these services that collect a lot of data about you these privacy
focused e-mail services collect no data they don't store any logs they don't track you.
Most of them use some sort of encryption.
The good ones would be used in end to end encryption.
So your e-mail will be encrypted at your end and only decrypted at the destination therefore nobody
that intercepts this e-mail will be able to read it.
Even the mail provider itself shouldn't be able to read it.
Now I actually look at these services as a hybrid between the e-mail services that we all know and use
such as Gmail and the e-mail services available on the darknet that I will talk about in the next lectures
because like I said first of all they offer all of the features that we are used to.
They are also user friendly but at the same time they won't track you.
They won't keep any logs and their privacy focused.
And another reason that makes me feel that they are like a hybrid is the fact that most of them are
available on the clear net and on the darknet.
So they'd have a clear Net address and a Dark Net address and they can communicate with both darknet
and clear net email providers similar to the temporary e-mails.
There are a number of providers that offer these services I highly encourage you to do your own research
and read the privacy policy before you sign up with any of them and never use your real identity if
you're using these services in the darknet.
Make sure you use your fake identity.
With that being said a very popular example is proton mail.
So this is just an example of a privacy focused e-mail provider.
It is not the only one.
And like I said I highly encourage you to do your own research and read and see which is best for you.
So proton mail comes with all of the features that I just mentioned that all of the providers in this
category offer on top of that it is open source.
So all of the code used is available for anyone to read and analyze and even if you don't know coding
you can be rest assured that people are constantly revising their code and will call them out if they
discover anything fishy.
Proton mail also enforces hasty G.P.S. on both on their clear net and on their darknet website which
is something that is rare on DarkNet websites.
And it is great because that adds an extra layer of encryption.
It uses end to end encryption.
So like I said the messages that you send get encrypted at your end and only decrypted at the destination
and vice versa.
So even proton mail if they wanted to read the content of your e-mail they won't be able to do that
because it's going to be encrypted.
They also use their own servers so they don't rent servers from third parties and all of their servers
are in Switzerland which is a country known for having good privacy laws with that being said if you
read their privacy policy and their transparency page you will see that they did reveal information
about specific users in order to comply with court orders.
But like I said they keep no logs.
They don't track you and everything is encrypted so they don't have a lot of information anyway even
if they do reveal this information.
And at the end of the day like I said at the start of the section I'm showing you all of the options
and you should go with what suits you best in terms of why you need this account and what's your threat
model.
Now let's go ahead and have a look on this Web site.
So right here I have their clear net Web site.
And in here I have their onion head in service for this to work.
You should actually put your security settings to medium to safer so that it allows javascript to be
executed on hash TTP pages.
Now dependent on your threat model you might not want to do this but in general because this is only
done on TTP pages which already has encryption and because proton mail is open source so all of its
code is known.
And because of their reputation it's not a very bad idea to do this now.
Signing up is very simple.
All you have to do is just click on sign up.
I'm going to choose the free account and I'm going to selected and let's set up a user name so like
I said you want to keep in mind that you are going to use your fake identity in here.
So I'm just going to set this to g o w c k and let's put a password.
You can also set a recovery e-mail that you can use to recover the password with.
I'm going to keep this to blank because I don't want to give a lot of information about myself and I'm
going to click on Create Account.
It's given me a warning that I'm creating an account without a recovery e-mail.
But that's fine and right now proton mail is going to create the keys that will be used to encrypt your
data your e-mails.
Like I said it uses end to end encryption.
So when you send something it gets encrypted at your end and it will only be decrypted at the destination.
Therefore anyone in the middle including proton mail themselves they won't be able to see the contents
of your emails.
Now you want to give this some time because it could take a few minutes.
Dependent on the specs of your computer.
OK.
Now it's asking me to solve this capture.
So I'm going to click I'm not a robot.
It's not accepting this probably because I'm using the Tor network.
So the other solution would be to verify myself that I'm not a robot using an e-mail.
And again you can use any email in here I'm going to use a temporary e-mail similar to the ones I showed
you in the previous lectures.
So I'm just gonna go to guerilla mail dot com.
Let's just use a different domain just in case there they get a lot of domains like this one
and that's copy this and paste it here and we're going to send so it's telling us that the verification
code should be sent to the email that we picked.
Let's go back and check if we actually did get this verification code perfect.
As you can see we have the code in here.
It's 9 7 4 6 4 4.
So go by Keir and we're going to click on complete setup.
Again you want to be patient with this and let it load and create your account and perfect as you can
see the account should be set up.
Now it's asking us if we want to change the name I'm going to keep it the way it is going to close these
tips aren't perfect as you can see it's a very nice user interface.
Like I said this really is like a hybrid between what you get on the clear net and on the darknet using
this is very intuitive.
I'm not going to waste more time on it.
This is your inbox draft sent and so on.
You click on composed to send a message.
The messages that you get will show up in here in the inbox and you can from any message you can click
on it.
And now that you're inside the message you can reply forward and so on.
So that's it for this lecture.
Just wanted to cover an example of a private kind of hybrid e-mail service.
Like I said this is not the only one.
So please don't take this as the only example.
This is just an example.
And I want you to understand the whole concept.
So there is a whole number of services that operate on the same concept.
Like I said there are a lot of pros to this as you can see in here.
The only cons are the fact that it uses javascript and the fact that it is a clear net Web site.
It is a proper company and they have complied and revealed information about their users when the court
ordered them to do so.
With that being said like I said they don't keep any logs.
They don't track you and everything is encrypted so they can't really reveal too much because they don't
know too much.
But again read the privacy policy continue with the options that I'm going to show you and pick the
option that works best for you based on the reason why you need this service and based on your threat
model.