PyBitmessage-2021-04-27/docs/contribute.dir/develop.dir/opsec.rst

Operational Security
====================

Bitmessage has many features that are designed to protect your anonymity during normal use. There are other things that you must or should do if you value your anonymity.

Castles in the sand
-------------------

You cannot build a strong castle on unstable foundations. If your operating system is not wholly owned by you then it is impossible to make guarantees about an application.

 * Carefully choose your operating system
 * Ensure your operating system is up to date
 * Ensure any dependencies and requirements are up to date

Extrordinary claims require extrordinary evidence
-------------------------------------------------

If we are to make bold claims about protecting your privacy we should demonstrate this by strong actions.

- PGP signed commits
- looking to audit
- warrant canary

Digital footprint
------------------

Your internet use can reveal metadata you wouldn't expect. This can be connected with other information about you if you're not careful.

 * Use separate addresses for different purposes
 * Don't make the same mistakes all the time
 * Your language use is unique. The more you type, the more you fingerprint yourself. The words you know and use often vs the words you don't know or use often.

Cleaning history
----------------

 * Tell your browser not to store BitMessage addresses
 * Microsoft Office seems to offer the ability to define sensitive informations types. If browsers don't already they may in the future. Consider adding `BM-\w{x..y}`.
Added: Sphinx docs, testing readthedocs integration * Added: Sphinx configuration including readthedocs config * Added: Sphinx fabric task to auto-document the project * Fixed: Some issues in the code causing autodoc to fail when parsing * Added: Manual docs - structure, proof of concepts and RsT examples * Fixed: RsT formatting in docstrings * Fixed: Some adjacent minor style and lint issues 2018-05-26 14:43:21 +02:00			`Operational Security`
			`====================`

			`Bitmessage has many features that are designed to protect your anonymity during normal use. There are other things that you must or should do if you value your anonymity.`

			`Castles in the sand`
			`-------------------`

			`You cannot build a strong castle on unstable foundations. If your operating system is not wholly owned by you then it is impossible to make guarantees about an application.`

			`* Carefully choose your operating system`
			`* Ensure your operating system is up to date`
			`* Ensure any dependencies and requirements are up to date`

			`Extrordinary claims require extrordinary evidence`
			`-------------------------------------------------`

			`If we are to make bold claims about protecting your privacy we should demonstrate this by strong actions.`

			`- PGP signed commits`
			`- looking to audit`
			`- warrant canary`

fix spelling mistakes 2019-12-27 13:32:43 +01:00			`Digital footprint`
Added: Sphinx docs, testing readthedocs integration * Added: Sphinx configuration including readthedocs config * Added: Sphinx fabric task to auto-document the project * Fixed: Some issues in the code causing autodoc to fail when parsing * Added: Manual docs - structure, proof of concepts and RsT examples * Fixed: RsT formatting in docstrings * Fixed: Some adjacent minor style and lint issues 2018-05-26 14:43:21 +02:00			`------------------`

			`Your internet use can reveal metadata you wouldn't expect. This can be connected with other information about you if you're not careful.`

fix spelling mistakes 2019-12-27 13:32:43 +01:00			`* Use separate addresses for different purposes`
Added: Sphinx docs, testing readthedocs integration * Added: Sphinx configuration including readthedocs config * Added: Sphinx fabric task to auto-document the project * Fixed: Some issues in the code causing autodoc to fail when parsing * Added: Manual docs - structure, proof of concepts and RsT examples * Fixed: RsT formatting in docstrings * Fixed: Some adjacent minor style and lint issues 2018-05-26 14:43:21 +02:00			`* Don't make the same mistakes all the time`
			`* Your language use is unique. The more you type, the more you fingerprint yourself. The words you know and use often vs the words you don't know or use often.`

			`Cleaning history`
			`----------------`

			`* Tell your browser not to store BitMessage addresses`
			* Microsoft Office seems to offer the ability to define sensitive informations types. If browsers don't already they may in the future. Consider adding `BM-\w{x..y}`.