wiki:torbirdy

Version 19 (modified by tagnaq, 7 years ago) (diff)

Troubleshooting ++

Codename: TorBirdy

TorBirdy is Torbutton for Thunderbird, Icedove and related Mozilla mail clients. It may also work with other non-web browser Mozilla programs such as Sunbird.

Status

TorBirdy is experimental. Use at your own risk! Please read our design goals document to understand what we're trying to accomplish with TorBirdy for our users.

Quick Setup Guide

This short guide should help you to setup your Thunderbird email client to send and fetch email via Tor. It can be used for new or already existing email accounts. Bear in mind that email accounts that have been used without Tor before offer less privacy/anonymity/weaker pseudonyms than email account that have been created using TorBrowser and have never been accessed without Tor, but TorBirdy is still useful for exiting accounts or real name email addresses for example if you are looking for location anonymity, i.e. you travel a lot and don't want to disclose all your locations by sending emails. TorBirdy works with SMTP and IMAP/POP3 but POP3 is recommended over IMAP because POP3 is a much simpler protocol and less likely to have or introduce any new scetchy features.

This guide does not cover Email account configuration (inserting the correct mailserver domain, port, username, ..).

Required Software

  • Tor
  • Thunderbird
  • TorBirdy

TorBirdy does not require a running instance of the TorBrowser Bundle (TBB) or a HTTP proxy.

Setup Steps

  1. step requires you to install Tor as a daemon.
  • On Windows and OSX download and install the Vidalia Bundle and make sure Vidalia starts automatically at system boot.
  • On Unix, Linux and BSD you should use your distributor's packages or if available the ones provided by the torproject.
  • Regardless of OS make sure Tor is running with default client settings (SocksPort is listening on 127.0.0.1:9050).
  1. step: install the TorBirdy extension
  • Open Thunderbird's Add-ons configuraton (Tools -> Add-ons) and type "torbirdy" into the search box on the right hand side
  • then click "Install"

Now you should be ready to go, there is no further configuration required.

Troubleshooting

If things don't work for you:

  1. make sure Tor is running and listening on 127.0.0.1 (localhost) on port 9050
  2. use Vidalia's "Tor Network Map" to confirm that something is trying to use the Tor instance to connect to an SMTP/POP3/IMAP port while sending/fetching emails. If nothing is using your running Tor instance Thunderbird is not connecting to your running Tor instance correctly. This could have the following reasons
    • tor is not running
    • tor's SocksPort is not running on the expected port 127.0.0.1:9050.
    • TorBirdy was configured to connect to something else then 127.0.0.1:9050
  3. If you see Thunderbird connecting to Tor and it is still not working, try hitting the "New Identity" button in Vidalia, it might be the case that the mailserver you are trying to conntect to does not like your source IP address (exit node)

Known TorBirdy Issues (Info Leaks)

  • #6314 leak via Date header field (local timestamp disclosure)
  • #6315 leak via Message-ID header field (local timestamp disclosure)

Additional Add-Ons

Enigmail (OpenPGP GPG for Thunderbird)

We dropped Enigmail support for now to be able to drop the HTTP proxy requirement. In most setups GnuPG requires a HTTP proxy to properly work (not leak) on your system. If you are lucky and you are running gpg with libcurl (>= 7.21.7) support, gpg can be used without http proxy.

mixgui (mixminion remailer for Thunderbird)

(Source: #6020) MixMinion isn't really ready for prime time. While we'd love to hear feedback about use with TorBirdy, I'm skeptical that MixMinion itself works very well. So for now, I'd suggest that you do not mix that plugin and TorBirdy unless you've got some good data or good feedback.

Lightning (Calendar for Thunderbrid)

See #6319.

Other Add-Ons

Please do not install random Add-Ons. If they have not been reviewed by the TorBirdy developers, they could harm your anonymity. Open a ticket it the Add-On is not listed here.

Acknowledgements

This project is by Jacob Appelbaum, Sukhbir Singh and tagnaq.