Opened 5 years ago

Closed 4 years ago

#8487 closed enhancement (worksforme)

Allow back-dooring oneself

Reported by: bastik Owned by: ioerror
Priority: Medium Milestone:
Component: Applications/TorBirdy Version:
Severity: Keywords:
Cc: sukhbir.in@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

This is probably not a good idea. Well I picked the summary accordingly.

Gmail and Tor just won't work for me, so I can't use TorBirdy because it gets used for every account. I can not exclude a domain form being passed though Tor. I assume that excluding specific accounts is quite difficult so I don't ask for this.

I also would like to fetch updates without using Tor (to reduce the load on the Tor network). I also don't want to put Gmail through Tor because of the traffic it might generate. I for myself don't require such an level of anonymity.

This could work on the domain level, by not restoring/resetting the network setting where I can exclude domains. Obviously allowing for back-dooring oneself is risky, so if you consider this put a big warning on such a thing.

It's bad that some things don't work (Gmail and Tor), but I'd still like to be able to use the other properties TorBirdy provides.

If that gives you major headache and/or makes your stomach twist pick INVALID or WONT FIX or whatever fits (nothing I remember REJECTED is probably missing).

Child Tickets

Change History (3)

comment:1 in reply to:  description Changed 4 years ago by sukhbir

Gmail and Tor just won't work for me, so I can't use TorBirdy because it gets used for every account. I can not exclude a domain form being passed though Tor. I assume that excluding specific accounts is quite difficult so I don't ask for this.

Have you looked at TorBirdy with Gmail?

I also would like to fetch updates without using Tor (to reduce the load on the Tor network). I also don't want to put Gmail through Tor because of the traffic it might generate. I for myself don't require such an level of anonymity.

This could work on the domain level, by not restoring/resetting the network setting where I can exclude domains. Obviously allowing for back-dooring oneself is risky, so if you consider this put a big warning on such a thing.

It's bad that some things don't work (Gmail and Tor), but I'd still like to be able to use the other properties TorBirdy provides.

The closest thing that I can think of that fits your use case scenarios is the Transparent Torification mode in TorBirdy 0.1.1 (latest stable release). It is for cases where you would want to run TorBirdy in "transparent" mode, i.e. the network settings are cleared and all other TorBirdy privacy settings remain. This is useful if you do not wish to use certain accounts with TorBirdy, so you switch on "Transparent Torification" (in TorBirdy's preferences, Proxy Settings) and then no traffic passes through Tor as the proxy settings are cleared. You can use it for things like updates, Gmail, etc.

Does this sound useful? Also, some users use different profiles -- one with TorBirdy and one without and they report that this works fine. This is also something that fits what you are looking for. More here.

comment:2 Changed 4 years ago by sukhbir

Cc: sukhbir.in@… added

comment:3 Changed 4 years ago by bastik

Resolution: worksforme
Status: newclosed

Have you looked at TorBirdy with Gmail?

Previously I tried to use Gmail via Thunderbird with Tor, which resulted in an error message. I then had to log into Gmail and confirm it was me requesting access. Following the procedure forced me to enter a phone-number and later on I had to change my password. I haven't tried lately, but previously Thunderbird could not fetch emails. Maybe I have to try it again.

[...] Transparent Torification mode in TorBirdy 0.1.1 [...] Does this sound useful?

This sounds indeed useful.

Also, some users use different profiles.

After all using two separate profiles is much safer. The risk to mess things up it not as high, I guess.

I'm going to close this ticket as there is a way get what I intended and it's safer to have two profiles. Please re-open if anyone disagrees and has valid points that require such an 'enhancement'.

Note: See TracTickets for help on using tickets.