Step 0 - Revision history

Floriana at 18:27, 27 May 2015

2015-05-27T18:27:34Z

Floriana: moved and cut part on secure mail

2015-05-27T17:37:06Z

moved and cut part on secure mail

Floriana: /* Anonymising your connections */

2015-05-27T17:19:40Z

‎Anonymising your connections

Floriana: edited links

2015-05-27T17:14:42Z

edited links

Floriana: added part on HTTS

2015-05-27T17:13:51Z

added part on HTTS

Floriana: edited links

2015-05-27T17:12:57Z

edited links

Floriana at 09:23, 26 May 2015

2015-05-26T09:23:33Z

Helen at 18:10, 25 May 2015

2015-05-25T18:10:03Z

Helen at 18:05, 25 May 2015

2015-05-25T18:05:29Z

Helen at 18:04, 25 May 2015

2015-05-25T18:04:31Z

← Older revision		Revision as of 18:27, 27 May 2015
Line 151:		Line 151:
	Repetitive Strain Injury (RSI) http://www.workrave.org/ Workrave is a program that assists in the recovery and prevention of Repetitive Strain Injury (RSI). The program frequently alerts you to take micro-pauses, rest breaks and restricts you to your daily limit.		Repetitive Strain Injury (RSI) http://www.workrave.org/ Workrave is a program that assists in the recovery and prevention of Repetitive Strain Injury (RSI). The program frequently alerts you to take micro-pauses, rest breaks and restricts you to your daily limit.
	(1) Annie Abrahams,separation/séparation http://collection.eliterature.org/2/works/abrahams_separation/separation/index.htm# (2) http://bluehackers.org/howto (3) http://workingstill-stillworking.net (4) Anne Goldenberg, Hacking with Care : Attention, bien-être et politique de l’ordinaire dans le milieu hacktiviste: http://dpi.studioxx.org/en/hacking-care-attention-bien-%C3%AAtre-et-politique-de-l%E2%80%99ordinaire-dans-le-milieu-hacktiviste (5) L'ERSE POSTURE https://www.youtube.com/watch?v=Va0ZLaZHQlU (6) http://networkcultures.org/blog/2007/04/23/linux-for-theatre-makers-embodiment-and-nix-modus-operandi/		(1) Annie Abrahams,separation/séparation http://collection.eliterature.org/2/works/abrahams_separation/separation/index.htm# (2) http://bluehackers.org/howto (3) http://workingstill-stillworking.net (4) Anne Goldenberg, Hacking with Care : Attention, bien-être et politique de l’ordinaire dans le milieu hacktiviste: http://dpi.studioxx.org/en/hacking-care-attention-bien-%C3%AAtre-et-politique-de-l%E2%80%99ordinaire-dans-le-milieu-hacktiviste (5) L'ERSE POSTURE https://www.youtube.com/watch?v=Va0ZLaZHQlU (6) http://networkcultures.org/blog/2007/04/23/linux-for-theatre-makers-embodiment-and-nix-modus-operandi/
		+
		+	[[Category:Resources]]

@@ Line 49: / Line 49: @@
-=== Securing your connections ===
+=== Securing your connections and communication ===
 Once we've mapped our data, the next step is making sure it's secure. Especially where your data is stored online, good passwords are crucial.
@@ Line 72: / Line 72: @@
 Likewise, when we create an account with an online service (e.g. our mailbox or a chat network) that we will access through a specific client or app, we should check the features of the service to make sure that it offers a secure connection and configure our clients accordingly by activating the '''TLS/SSL''' option.
 === Anonymising your connections ===
@@ Line 112: / Line 116: @@
 For more information on Tor and instructions for Windows users, see Security in a box's [https://securityinabox.org/en/guide/anonymity-and-circumvention howto].
 For instructions for Mac OSX users, visit this [https://ssd.eff.org/en/module/how-use-tor-mac-os-x howto] by the EFF.
 === Devices and Well being ===

@@ Line 78: / Line 78: @@
 '''Virtual Private Networks (VPN: accessing the web through an encrypted tunnel'''
-To add a layer of protection, we can access the internet through a virtual private network (VPN) - an encrypted tunnel that hides all services, protocols, and contents. Using a VPN is not difficult: it basically requires downloading a compressed file, extracting it and changing our computer’s connection settings, but it is important to choose a secure one – better if located abroad – because a compromised VPN server could be accessed by an intermediary who could then analyse all our activities. Autonomous servers Riseup – https://help.riseup.net/en/vpn – and Autistici/Inventati – https://vpn.autistici.org – both offer a reliable VPN.
+To add a layer of protection, we can access the internet through a virtual private network (VPN) - an encrypted tunnel that hides all services, protocols, and contents. Using a VPN is not difficult: it basically requires downloading a compressed file, extracting it and changing our computer’s connection settings, but it is important to choose a secure one – better if located abroad – because a compromised VPN server could be accessed by an intermediary who could then analyse all our activities. Autonomous servers [https://help.riseup.net/en/vpn Riseup] and [https://vpn.autistici.org Autistici/Inventati] both offer a reliable VPN.
 But we should consider that from a technical standpoint VPNs have some limitations:
-'''An insecure connection is still insecure''': Although a VPN will anonymise our location and protect us from surveillance from our ISP, once our data is securely routed through the VPN server, it will go out on the internet as it normally would. This means we should still use TLS when available (ie. (HTTPS to browse websites, pop-ssl/imaps/smtp-tls for mail exchange, and so on). *EXPLANATION NEEDED ON TLS*
+'''An insecure connection is still insecure''': Although a VPN will anonymise our location and protect us from surveillance from our ISP, once our data is securely routed through the VPN server, it will go out on the internet as it normally would. This means we should still use TLS/SSL when available (ie. (HTTPS to browse websites, pop-ssl/imaps/smtp-tls for mail exchange, and so on).
-'''VPNs are not a panacea''': although they accomplish a lot, they can’t fix everything. For example, they cannot increase our security if our computer is already compromised with viruses or spyware. If we give personal information to a website, there is little that a VPN can do to maintain our anonymity with that website or its partners. For more information, see Riseup’s webpage on VPN anonymity: https://help.riseup.net/en/vpn/security-issues.
+'''VPNs are not a panacea''': although they accomplish a lot, they can’t fix everything. For example, they cannot increase our security if our computer is already compromised with viruses or spyware. If we give personal information to a website, there is little that a VPN can do to maintain our anonymity with that website or its partners. For more information, see Riseup’s [https://help.riseup.net/en/vpn/security-issues webpage on VPN anonymity].
-'''The connection might get slower''': the VPN routes all our traffic through an encrypted connection to the server before it goes out onto the normal internet. This extra step can slow things down.  For more information on VPNs, visit: https://securityinabox.org/en/guide/anonymity-and-circumvention
+'''The connection might get slower''': the VPN routes all our traffic through an encrypted connection to the server before it goes out onto the normal internet. This extra step can slow things down.  For more information on VPNs, visit [https://securityinabox.org/en/guide/anonymity-and-circumvention this page].
 '''Hiding your IP address using the Tor network'''
 A key step to being anonymous online is to  hide your IP address.
-On way to do this is to use a tool called Tor, an anonymity network that conceals both the location of our connection and what we do on the internet. By consistently using Tor, no one can link our IP (and therefore our alternative identity) to us, not even the mail server we use. For further information on how to use Tor, see  ??
+On way to do this is to use a tool called Tor, an anonymity network that conceals both the location of our connection and what we do on the internet. By consistently using Tor, no one can link our IP (and therefore our alternative identity) to us, not even the mail server we use. For further information on how to use Tor, see the project's [https://www.torproject.org/ website].
-The Tor Browser (https://www.torproject.org/projects/torbrowser.html.en) is a software tool designed to increase the privacy and security of our Internet activities and habits. It masks our identity and our online browsing from many forms of internet surveillance.
+The [https://www.torproject.org/projects/torbrowser.html.en Tor Browser] is a software tool designed to increase the privacy and security of our Internet activities and habits. It masks our identity and our online browsing from many forms of internet surveillance.
 From the Tor Project:
@@ Line 110: / Line 110: @@
 If we want to browse the web anonymously with more than one identity, we can do so by creating each time a new identity for our browser, so that a new set of random Tor proxy servers is selected and we appear to come from a new location to the web servers. To do this, we just need to click the onion icon in the upper left of our browser and to select “New identity” from the menu. The Tor Browser will briefly close, clearing our browsing history and cookies and then restart. After that, we can safely browse the internet with a different identity.
-For more information on Tor and instructions for Windows users, visit: https://securityinabox.org/en/guide/anonymity-and-circumvention
+For more information on Tor and instructions for Windows users, see Security in a box's [https://securityinabox.org/en/guide/anonymity-and-circumvention howto].
-For instructions for Mac OSX users, visit: https://ssd.eff.org/en/module/how-use-tor-mac-os-x
+For instructions for Mac OSX users, visit this [https://ssd.eff.org/en/module/how-use-tor-mac-os-x howto] by the EFF.
 [SECTION ON EMAIL HOSTING - NOT SURE HOW THIS FITS IN HERE]
-Also the choice of the mail server we use for our contact mail address is important. While there are several secure servers that offer a good service – e.g. the Swiss commercial service Kolab Now (https://kolabnow.com) and the autonomous servers Riseup (a site used by activists with a clear set of political principles: http://riseup.net) and Autistici/Inventati (https://www.autistici.org) – the main point is to find a service that offers a secure connection (HTTPS instead of HTTP) and that is compatible with our virtual persona. If, for instance, we are creating a fake identity that doesn’t know much about digital security, it may be better to use a more widespread service like Gmail, and the possibility of two-factor authentication is always a plus. If the mail address we are creating is connected to our work and hosted by our firm’s mail server with its own domain, it is a good idea not to include our surname in the address and to keep just the name followed by the domain (e.g. jane@businessname.com). Of course, if a mail address is required when registering a new mail account, we shouldn’t give our usual address and it is much better to use a disposable account for this purpose.
+Also the choice of the mail server we use for our contact mail address is important. While there are several secure servers that offer a good service – e.g. the Swiss commercial service [https://kolabnow.com Kolab Now] and the autonomous servers [http://riseup.net Riseup] (a site used by activists with a clear set of political principles) and [https://www.autistici.org Autistici/Inventati] – the main point is to find a service that offers a secure connection (HTTPS instead of HTTP) and that is compatible with our virtual persona. If, for instance, we are creating a fake identity that doesn’t know much about digital security, it may be better to use a more widespread service like Gmail, and the possibility of two-factor authentication is always a plus. If the mail address we are creating is connected to our work and hosted by our firm’s mail server with its own domain, it is a good idea not to include our surname in the address and to keep just the name followed by the domain (e.g. jane@businessname.com). Of course, if a mail address is required when registering a new mail account, we shouldn’t give our usual address and it is much better to use a disposable account for this purpose.
 === Devices and Well being ===

@@ Line 69: / Line 69: @@
 ==== Using a secure connection ====
-    Another very important measure we should take when going online, especially if we are transmitting personal data and passwords, is to always use a '''secure SSL connection''', which ensures that our data cannot be seen by anyone as they travel from our computer to the website we are visiting or to the service we are using. To do so, when we access a website we should type HTTPS instead of HTTP befor the url of the website we want to visitin. If we receive an error or the HTTPS is replaced by HTTP again, this means that the website is not offering a secure connection. To make sure that we always connect securely to websites when this option is offered, we can install '''HTTPS Everywhere''', a Firefox, Chrome, and Opera extension developed by the Electronic Frontier Foundation that encrypts our communications with many major websites: https://www.eff.org/https-everywhere
+Another very important measure we should take when going online, especially if we are transmitting personal data and passwords, is to always use a '''secure SSL connection''', which ensures that our data cannot be seen by anyone as they travel from our computer to the website we are visiting or to the service we are using. To do so, when we access a website we should type HTTPS instead of HTTP befor the url of the website we want to visitin. If we receive an error or the HTTPS is replaced by HTTP again, this means that the website is not offering a secure connection. To make sure that we always connect securely to websites when this option is offered, we can install [https://www.eff.org/https-everywhere '''HTTPS Everywhere'''], a Firefox, Chrome, and Opera extension developed by the Electronic Frontier Foundation that encrypts our communications with many major websites.
-    Likewise, when we create an account with an online service (e.g. our mailbox or a chat network) that we will access through a specific client or app, we should check the features of the service to make sure that it offers a secure connection and configure our clients accordingly by activating the '''TLS/SSL''' option.
+Likewise, when we create an account with an online service (e.g. our mailbox or a chat network) that we will access through a specific client or app, we should check the features of the service to make sure that it offers a secure connection and configure our clients accordingly by activating the '''TLS/SSL''' option.
 === Anonymising your connections ===

@@ Line 66: / Line 66: @@
 To learn more about the Diceware technique, read [https://firstlook.org/theintercept/2015/03/26/passphrases-can-memorize-attackers-cant-guess this article] published by Micah Lee in The Intercept.
 To learn more about two-factor authentication and security questions, read EFF's [https://ssd.eff.org/en/module/creating-strong-passwords "Creating Strong Passwords"].
 === Anonymising your connections ===

@@ Line 55: / Line 55: @@
 ''' Creating and using strong passwords'''
-Managing passwords is also a crucial part of maintaining our information online. Using the same password over and over again is risky, as are passwords that connect us to our identit(ies). Since a password is only as secure as the least secure service where it has been used, it is good practice to maintain separate passwords for each of our accounts. For more information on the importance of strong passwords and how to store them, read Security in a Box's chapter on passwords. https://securityinabox.org/en/guide/passwords
+Managing passwords is also a crucial part of maintaining our information online. Using the same password over and over again is risky, as are passwords that connect us to our identit(ies). Since a password is only as secure as the least secure service where it has been used, it is good practice to maintain separate passwords for each of our accounts. For more information on the importance of strong passwords and how to store them, read Security in a Box's [https://securityinabox.org/en/guide/passwords%20 chapter on passwords].
-−
 *Using a password manager
-To keep multiple secure passwords, you can use a password manager. *KeePassX* is a cross-platform free and open-source password manager that is easy to use and creates files with passwords that can also be exported and used in other devices. It can generate random passwords and store them securely.  To learn how to use KeePassX, read this how-to: https://securityinabox.org/en/guide/keepass/windows
+To keep multiple secure passwords, you can use a password manager. *KeePassX* is a cross-platform free and open-source password manager that is easy to use and creates files with passwords that can also be exported and used in other devices. It can generate random passwords and store them securely.  To learn how to use KeePassX, read this [https://securityinabox.org/en/guide/keepass/windows%20 how-to].
-To learn how to use KeePassDroid, the correspondent tool for Android, read this how-to: https://securityinabox.org/en/guide/keepassdroid/android
+To learn how to use KeePassDroid, the correspondent tool for Android, read this [https://securityinabox.org/en/guide/keepassdroid/android how-to].
 *Creating strong passphrases using the diceware technique *
-Some passwords — like the one we use to decrypt our KeePassX file or lock our devices —need to be easy to remember and strong at the same time. A good solution is to create passphrases that are formed by a random group of words that don’t make any sense together, separated by spaces. One way to do this is to use the Diceware techique (this requires six-sided dice and the Diceware word list: http://world.std.com/~reinhold/dicewarewordlist.pdf [PDF].
+Some passwords — like the one we use to decrypt our KeePassX file or lock our devices —need to be easy to remember and strong at the same time. A good solution is to create passphrases that are formed by a random group of words that don’t make any sense together, separated by spaces. One way to do this is to use the Diceware techique (this requires six-sided dice and the [http://world.std.com/~reinhold/dicewarewordlist.pdf Diceware word list] [PDF].
 By rolling the dice five times, we will come up with a five-digit number that corresponds to a word on the Diceware word list; this word is the first word of our passphrase. If we repeat this at least six times, we can create a strong passphrase formed by six words that together make a strong, random passphrase. It can be memorized just as we did when we had to learn poems by heart at school and will be so long that it would take an average of 3500 years to crack it with brute force at a speed of one trillion guesses per second.
-To learn more about the Diceware technique, read this article published by Micah Lee in The Intercept:
+To learn more about the Diceware technique, read [https://firstlook.org/theintercept/2015/03/26/passphrases-can-memorize-attackers-cant-guess this article] published by Micah Lee in The Intercept.
-https://firstlook.org/theintercept/2015/03/26/passphrases-can-memorize-attackers-cant-guess.
+To learn more about two-factor authentication and security questions, read EFF's [https://ssd.eff.org/en/module/creating-strong-passwords "Creating Strong Passwords"].
-To learn more about two-factor authentication and security questions, read EFF's "Creating Strong Passwords": https://ssd.eff.org/en/module/creating-strong-passwords
-−
-−
-'''SOMETHING TO BE ADDED ABOUT ABOUT HTTPS'''
 === Anonymising your connections ===

← Older revision		Revision as of 09:23, 26 May 2015
Line 1:		Line 1:
	__TOC__		__TOC__
		+
		+	'''recommendations for the printed version: http://etherpad.calafou/p/securitydisclaimer'''

	== Before you start: mapping your data and devices; securing your data; anonymising your connections ==		== Before you start: mapping your data and devices; securing your data; anonymising your connections ==

@@ Line 4: / Line 4: @@
 This section provides you with notions, methodologies and tools to take care of your data and devices and have those taking care of you. Data and devices management requires to reflect on their hosting and leaving qualities and in how we can configure those to not mess around with our well-being. This section It also explains how to engage into more secure communication practices when you get connected. All the following tips and tricks are pre-requisites to better understand how to manage identity on-line and creating safe spaces.
-* EDIT *
+'''EDIT'''
 This section will cover the starting points: what data do you produce and store? Where? How do you make sure your data is secure? And when you're connecting to the internet, how do you anonymise your connections?
@@ Line 14: / Line 14: @@
 Before becoming a zen user and developer of technologies, and adopting better privacy and digital security practices, it's important to first know what you want to protect. One way of doing this is to map (using a table, map, drawing, etc) your production and management of data.
-* What kind of data do you produce and or manage? With whom?
+*What kind of data do you produce and or manage? With whom?
 To begin mapping your data, first make a list of the data you create yourself. This can include personal and work-related documents, emails, images, videos, designs, tweets, blog posts, and so on. Then make a list  of the data you manage or store, which is produced by others. This can encompass information given to you by your colleagues, friends, relatives to files you download from websites, repositories, p2p networks, etc. Finally, identify which type of data you share with others, for instance if you share a social media profile or email account with a family member, partner, or colleagues.
-* Where is this data stored?
+'''Where is this data stored?'''
-Which devices hold your data?
+*Which devices hold your data?
 -This can include your computer, external drives, and phone.
-Which online platforms host your data?
+*Which online platforms host your data?
 - This can include emails, social media accounts, etc. Also bear in mind that some applications enable syncing of data between your different devices, or between your devices and online platforms, and it's important to know where and when this is happening.
-How do you organise your data?
+*How do you organise your data?
 - Do you keep your personal/professional/activist data separate?
-How sensitive is your data?
+*How sensitive is your data?
 - For each type of data you have listed in your data map, what would happen if this particular data suddenly disappeared? For instance, if your email account is closed down, if your computer or external hard drive is stolen or breaks down, if you accidentally erase a folder, etc?.
 - What would happen if this data were seen and copied by a third party?
@@ Line 35: / Line 35: @@
 Do the same mapping exercise for the data you hold on others.
-Once you've answered thes questions, you'll be better able to make decisions about which data you want to regularly back up, and where these backups will be stored. You will also be better able to decide what to do with your data when traveling - What type of data do you need with you? What is too sensitive? What can you easily access online?
+Once you've answered thesE questions, you'll be better able to make decisions about which data you want to regularly back up, and where these backups will be stored. You will also be better able to decide what to do with your data when traveling - What type of data do you need with you? What is too sensitive? What can you easily access online?
-* How do you build trust in relation to your data and how you store it?
+How do you build trust in relation to your data and how you store it?
 When doing so, ask yourself who has access to this device or media platform (your family, colleagues, friends, or servers administrators and you do not know
 ????
 * Syncing (online/offline – apps permissions)
@@ Line 51: / Line 51: @@
 Once we've mapped our data, the next step is making sure it's secure. Especially where your data is stored online, good passwords are crucial.
-* Creating and using strong passwords *
+''' Creating and using strong passwords'''
 Managing passwords is also a crucial part of maintaining our information online. Using the same password over and over again is risky, as are passwords that connect us to our identit(ies). Since a password is only as secure as the least secure service where it has been used, it is good practice to maintain separate passwords for each of our accounts. For more information on the importance of strong passwords and how to store them, read Security in a Box's chapter on passwords. https://securityinabox.org/en/guide/passwords
-- Using a password manager
+*Using a password manager
 To keep multiple secure passwords, you can use a password manager. *KeePassX* is a cross-platform free and open-source password manager that is easy to use and creates files with passwords that can also be exported and used in other devices. It can generate random passwords and store them securely.  To learn how to use KeePassX, read this how-to: https://securityinabox.org/en/guide/keepass/windows
 To learn how to use KeePassDroid, the correspondent tool for Android, read this how-to: https://securityinabox.org/en/guide/keepassdroid/android
-- Creating strong passphrases using the diceware technique *
+*Creating strong passphrases using the diceware technique *
 Some passwords — like the one we use to decrypt our KeePassX file or lock our devices —need to be easy to remember and strong at the same time. A good solution is to create passphrases that are formed by a random group of words that don’t make any sense together, separated by spaces. One way to do this is to use the Diceware techique (this requires six-sided dice and the Diceware word list: http://world.std.com/~reinhold/dicewarewordlist.pdf [PDF].
@@ Line 68: / Line 68: @@
-SOMETHING TO BE ADDED ABOUT ABOUT HTTPS
+'''SOMETHING TO BE ADDED ABOUT ABOUT HTTPS'''
 === Anonymising your connections ===
@@ Line 74: / Line 74: @@
 When browsing the internet through a normal internet connection, there are several ways in which we give away data about ourselves - our IP address (the number that identifies our connection), for example, or which websites we are visiting. There are also several ways to intercept our communications, especially if we are connecting via a free Wi-Fi spot.
-* Virtual Private Networks (VPN: accessing the web through an encrypted tunnel *
+'''Virtual Private Networks (VPN: accessing the web through an encrypted tunnel'''
 To add a layer of protection, we can access the internet through a virtual private network (VPN) - an encrypted tunnel that hides all services, protocols, and contents. Using a VPN is not difficult: it basically requires downloading a compressed file, extracting it and changing our computer’s connection settings, but it is important to choose a secure one – better if located abroad – because a compromised VPN server could be accessed by an intermediary who could then analyse all our activities. Autonomous servers Riseup – https://help.riseup.net/en/vpn – and Autistici/Inventati – https://vpn.autistici.org – both offer a reliable VPN.
 But we should consider that from a technical standpoint VPNs have some limitations:
-* An insecure connection is still insecure: * Although a VPN will anonymise our location and protect us from surveillance from our ISP, once our data is securely routed through the VPN server, it will go out on the internet as it normally would. This means we should still use TLS when available (ie. (HTTPS to browse websites, pop-ssl/imaps/smtp-tls for mail exchange, and so on). *EXPLANATION NEEDED ON TLS*
+'''An insecure connection is still insecure''': Although a VPN will anonymise our location and protect us from surveillance from our ISP, once our data is securely routed through the VPN server, it will go out on the internet as it normally would. This means we should still use TLS when available (ie. (HTTPS to browse websites, pop-ssl/imaps/smtp-tls for mail exchange, and so on). *EXPLANATION NEEDED ON TLS*
-- VPNs are not a panacea: although they accomplish a lot, they can’t fix everything. For example, they cannot increase our security if our computer is already compromised with viruses or spyware. If we give personal information to a website, there is little that a VPN can do to maintain our anonymity with that website or its partners. For more information, see Riseup’s webpage on VPN anonymity: https://help.riseup.net/en/vpn/security-issues.
+'''VPNs are not a panacea''': although they accomplish a lot, they can’t fix everything. For example, they cannot increase our security if our computer is already compromised with viruses or spyware. If we give personal information to a website, there is little that a VPN can do to maintain our anonymity with that website or its partners. For more information, see Riseup’s webpage on VPN anonymity: https://help.riseup.net/en/vpn/security-issues.
-- The connection might get slower: the VPN routes all our traffic through an encrypted connection to the server before it goes out onto the normal internet. This extra step can slow things down.  For more information on VPNs, visit: https://securityinabox.org/en/guide/anonymity-and-circumvention
+'''The connection might get slower''': the VPN routes all our traffic through an encrypted connection to the server before it goes out onto the normal internet. This extra step can slow things down.  For more information on VPNs, visit: https://securityinabox.org/en/guide/anonymity-and-circumvention
-* Hiding your IP address using the Tor network*
+'''Hiding your IP address using the Tor network'''
 A key step to being anonymous online is to  hide your IP address.
 On way to do this is to use a tool called Tor, an anonymity network that conceals both the location of our connection and what we do on the internet. By consistently using Tor, no one can link our IP (and therefore our alternative identity) to us, not even the mail server we use. For further information on how to use Tor, see  ??