Email and Clients

I settled on Windows live Mail and have been using it for a while now. Just two problems. First I have to figure out how to import my contacts from Outlook, the Office 2000 version into WLM. Secondly I had to disable monitoring of out going mail in Avira Premium because the Mailguard was blocking them. The reason as follows: "TLS connection detected. Sending of this email blocked". "You are using a TLS encrypted connection on the standard port to send emails. Mailguard is not able to scan these encrypted connections for viruses and unwanted programs. The connection will be terminated". Avira further advises to disable monitoring of outgoing emails (STMP) by mailguard. For me the outgoing scan is no big deal.

 

I don't have much experience with Outlook 2000, but you can check for a way to export contacts in CSV or .XLS format. Later you can import those in WLM.
As far as scanning goes, Avira categorically denies being able to scan emails that are recieved/sent using encrypted protocols, irrespective of the email client being used. I believe currently only avast!, eset, AVG and Kaspersky allow that.
Which email service are you using in WLM?

 

Open up the Contacts window and then try File>Import. I don't have Outlook installed but the choices listed in mine are the .wab file, a .vcf file, the Outlook address book, address book for the current Windows user or a .csv file. In the main window Import only appears to be able to import emails.

 

A friend of mine imported the contacts for me. Not sure what you mean by email service. Are you asking who my ISP is?

 

The latest build of Thunderbird has been giving me enormous issues. Any I should consider with the security in my sig? Possibly something is incompatible.

 

What issues ?

 

Already did the fix in their database. It happens after I send a message, then I have to do their fix just to send another one.

 

That sucks - hope that is fixed soon!

 

I wont know as Im switching. Im going to go through Office Outlook 2007 tomorrow morning before work.

 

Me too

Now moving to Trulymail which has it's own client that you can also add your other email accounts to - http://trulymail.com/

 

Ive got Outlook 2007 configured for the most part, but there are a few things that I cant seem to figure out.

https://www.wilderssecurity.com/showthread.php?t=280091

 

Same here. Hotmail account is my primary email, Gmail is only for 'junk' emails.
MS did a great job with latest update Hotmail service and Wave 4

 

Outlook 2010 with 5 email addresses and Hotmail web mail!

TH

 

I forgot mention... I use Windows Live Mail.

 

Well this sucks....noone uses GPG for email encyrption?
Or paid email providers?

I use Lavabit (paid); they have one way encyrption so once the email is stored in their servers it cannot be accessed by anyone without the users password.
Lavabit also offers a free account without encryption.

I gather Eumx.net also offers good email services, but only paid.

 

Good point wearetheborg, I'm also curious how many wilders use paid email services.
Remember that both providers (Hotmail and Gmail) offer paid email accounts (Hotmail Plus for example). So far I use free email account.

 

This is a long winded post but i've spent alot of time looking into this area and if your the least bit concerned about email security, hacking and privacy, these are my 2 choices "beyond the best solution which is using outlook or thunderbird and open pgp(example - GPG4Win) to exchange all email".

Free:

TrulyMail - http://trulymail.com/Features.aspx

Email client which performs (automatic encryption and decryption client side with private key also stored client side)public/private key encryption between trulymail users using encrypted servers. Can also setup regular email accounts (gmail, hotmail, aol, etc) and send/receive regular email with the added benefit of sending regular email as an "encrypted package" (both parties need the trulymail client to verify ownership of regular email addresses by authenticating with a verify code). The encrypted package is decrypted clientside with the private key(encrypted with the receivers public key before transmission) sent from the trulymail servers.

The easiest way to understand the security involved here is to read some info i received from trulymail support which is talking about regular email sent as an encrypted package and then trulymail messages and i will quote:

Paid:

CryptoHeaven - http://www.cryptoheaven.com/

Encrypted Mail
Encrypted Storage
Encrypted Chat

Price: Starts at $7.99/month or $66.00/year = $5.50/month us dollars and increase the more amount of storage you require.

Email client for cryptoheaven public/private key accounts (all email between cryptoheaven users are automatically encrypted/decrypted client side and stored on encrypted servers). Users have the choice of storing their private key "client side" or if they travel alot without their computer, "server side"

Cannot setup other accounts in the client to "send from" but can forward other email account's mail "receive"to your cryptoheaven account. The good part here is that all regular mail (plain text) received to your cryptoheaven account is automatically encrypted with the user's public key when they hit the server and then automatically decrypted when downloaded into the client.

I'm sure i missed something

Edit:

Yes, i did - cryptoheaven mail sent to a non cryptoheaven user can be sent encrypted and decrypted by the receiver by inserting a password/answer (pre-shared or answer they will know to a question) you provide right in the email itself.

 

@wearetheborg

Thanks for the mention of lavabit. I'm checking them out.

 

Sure.
I have been using them for 4 years or so, quite happy with them. They have had some downtime (maybe 5 days or so in total, over a period of 4 years). But thats it.

Super simple interface, but it works.

A nice thing is that they have IMAP, so you can transfer/backup all your mail from any other email provider by first downloading to Thunderbird, then copy pasting into Lavabit account.

If you want multiple email account, eumx.net is also quite good (but they dont have a free account)

 

Outlook isnt very friendly. Ever since installing it Ive been getting random system lags and the only thing Ive changed is my email client.

Any others that are similar to TB/Outlook?

 

@wearetheborg

I really like the idea of the one way encryption. Do they mean if your password was compromised by a hacker they couldn't read your email since it's encrypted. I'm hoping I understand this correctly. I shot off a email to them about storage limit but didn't think at the time to ask about the encryption.

 

Im pretty set on TheBat. Lots of customization, light weight, fast, plugins for spam and virus filtering, etc.

 

No, if your password is compromised, then the hacker can read your emails. But if their servers are compromised, if a hacker gets hold of the data on their servers, she cannot decrypt the data (your emails).

In gmail etc, your emails are stored in plaintext on googles servers, so anyone who gets access to the servers can read the emails. Lavabit is ensuring that if the breach is on their end, your emails will be unreadable to the hacker. It could be a disgruntled employee, or the govt asking for all emails 5 years down the line etc; with lavabit, your emails are secure against all this. They say even they cannot read your emails once its on their servers.

The first email you get after signing up is actually not to lose your password

Their storage limit is on their home page:
http://lavabit.com/

 

There's also a recent thread on secure email services you can read through here - https://www.wilderssecurity.com/showthread.php?t=279029

 

@wearetheborg

Thanks for clarifying that. It looks like the limit is on a day to day basis; at least that's what their site says.

I don't see a real address or phone# for lavabit, do you? If so, that makes me suspicious.

@tobacco

Thanks for that link. I'm checking it out also.