bitmsg.cc - Dead Simple Email Gateway

[deadserious]

I have created a dead simple email gateway for Bitmessage and would love your feedback.

To use, simply send a regular email to a Bitmessage address @bitmsg.cc. 

For example:
BM-2DC13MWuuK9s6LvDEyXfD66yV9B3WsdzHm@bitmsg.cc

The owner of that Bitmessage address will receive the email in their Bitmessage client.  When the user replies in Bitmessage, the message will be sent back as an email to the original sender.

This is very beta at the moment but I welcome your testing to help it mature quickly.  Please do not depend on this right now for anything important or send anything sensitive.

There is a very simple site at http://bitmsg.cc that pretty much explains what I did here.

Feedback and bug reports are welcome.

Thanks

[bitbutter]

Excellent! I was hoping a service like this would show up.

Aside from it being in beta, are there security/privacy implications of using a bridge service like this that people should be aware of?

[Olomana]

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  BM-GtbNFGpp3DqDVZXceoFR6nJV9Ygeiben@bitmsg.cc
    SMTP error from remote mail server after RCPT TO:<BM-GtbNFGpp3DqDVZXceoFR6nJV9Ygeiben@bitmsg.cc>:
    host mail.bitmsg.cc [37.139.3.72]: 550 This email account is not valid on this domain.

[AyrA]

Since the from address can be spoofed, how do you prevent people from signing up with random addresses?

[r00tz]

Since the from address can be spoofed, how do you prevent people from signing up with random addresses?

I don't understand AyrA, there is no sign up, how do you mean? It just forwards Emails to/replies from BM addresses.

[r00tz]

Same error message as Olomana. No doubt you'll get it fixed, let us know when it's working again?

[deadserious]

Excellent! I was hoping a service like this would show up.

Aside from it being in beta, are there security/privacy implications of using a bridge service like this that people should be aware of?

The main privacy and security concerns are the same with any email service. Plain text, unencrypted,  nsa spying on traffic etc.

I do not log anything serverside though that isn't necessary to make the exchange. So basically all I know is that xyz@abc.com now represents a BM-164876... address. I also currently have the private key for that address on my server in an unencrypted keys.dat file. This makes them open to theft, but the exposure is somewhat minimal since if they are ever compromised all I have to do is delete it. I Addresses will automatically get new addresses when one is not found. However replies to old addresses would fail until an email from that address was again received. Working on a way to better protect this to prevent that scenario.

[deadserious]

Since the from address can be spoofed, how do you prevent people from signing up with random addresses?

There is no sign up necessary. If you send a mail to bitmsg from a spoofed address, replies would go to that address, not the original sender.

[deadserious]

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  BM-GtbNFGpp3DqDVZXceoFR6nJV9Ygeiben@bitmsg.cc
    SMTP error from remote mail server after RCPT TO:<BM-GtbNFGpp3DqDVZXceoFR6nJV9Ygeiben@bitmsg.cc>:
    host mail.bitmsg.cc [37.139.3.72]: 550 This email account is not valid on this domain.

Odd. Looking into it.

[deadserious]

  BM-GtbNFGpp3DqDVZXceoFR6nJV9Ygeiben@bitmsg.cc

Simple bug effecting 35 character addresses.  Should be fixed.

[deadserious]

Added a FAQ to the webpage

http://bitmsg.cc/

[r00tz]

Is that your BM-address given as example on the site? If so would like to DBM you

-- Addresses without BM- should perhaps also be acceptable, currently they're not

-- Now no error comes back, but almost an hour later, the Email has not arrived in BM

[deadserious]

Is that your BM-address given as example on the site? If so would like to DBM you

-- Addresses without BM- should perhaps also be acceptable, currently they're not

-- Now no error comes back, but almost an hour later, the Email has not arrived in BM

That is my address, though the one on the site is preferred for discussion on this topic.

Regarding delay, I am running into the 100% cpu issue on my Linux server and I often have to restart bitmessage to get it to go through. I have a cron job that restarts it every 4 hours so there shouldn't be a delay much longer than that.

[dokument]

Awesome service. Added to the directory.

.dok

[deadserious]

-- Addresses without BM- should perhaps also be acceptable, currently they're not

Forgot to say that I use the BM- do make sure that the address is valid and not lowercased by the sending service.

-- Now no error comes back, but almost an hour later, the Email has not arrived in BM

Has it come through yet?