|
Eudora has a couple "anonymity problems". If Eudora is already setup as a mail client for another ISP, say "yourdomain.com" and you add a Cotse Pseudo-Anonymous Email Account, the "message-id" placed on all outgoing messages will be set by the "dominant" account. The same holds true if you make Cotse the "dominant" account.
Also, Eudora adds a couple other headers to your outgoing email that you may not like, such as the "x-sender" and "x-mailer" header. There's a well written and easy to follow document and the utility to change this here.
Most email clients, such as Eudora, Outlook Express and many, many others are designed to adhere to accepted standards whereby the client, not the server, places a "message-id" on all outgoing mail.
This can be insecure for our users. If you wish to remain as anonymous as possible, you should change your dominant account to something invalid. We have chosen to use "nowhere.org" as an example of an invalid account. You may use whatever you wish, just remember, it shouldn't have anything to do with you or your online presence in order to maintain anonymity.
To further explain, it's necessary for you to send an outgoing test message, from your existing "dominant" account. If you don't have Eudora setup already, skip this portion and go to "New Setup" below. For those that are currently using Eudora as their mail client, try this:
Compose a new email, use any "personality" you wish to send the message. Send it to one of your other accounts or to the "dominant" account. It really doesn't matter who you are sending "as", just make sure you send it to yourself so you may check the headers.
Send the message, then retrieve your mail. When the message arrives in your inbox, check the message headers. The easiest way of doing this would be to "double-click" the new message, then click "blah blah" in the title of the message. The entire message header should appear. If you look for "message-id" you will note the domain directly reflects the domain of your "dominant" account.
If you want to increase your anonymity with Eudora, it is advisable to change your "dominant" settings to reflect a non-working email address. Eudora uses the "dominant" account when setting up the outgoing message-id. The Message-ID is mandatory and cannot be "left-out". However, it can be set to reflect a non-working, invalid account.
New Setup:
(Note, this is for a new setup, not for an existing Eudora setup. If you are currently using Eudora for your email and you are adding a Cotse account, or you would like to secure your existing setup, please go to "Existing Eudora Settings below)
In Eudora, goto "Personalities", right click and select "properties".
Personal Information -> "anonymous"
Email Address -> "none@nowhere.com"
Login Name -> "none"
Incoming Email Server -> "none.nowhere.org"
Outgoing Email Server -> "none.nowhere.org", uncheck "allow authentication"
Next -> Ok
Goto "personalities"
Right Click on the new ""dominant"" account, click "properties"
Uncheck "check mail", We don't want to try and check this mail, as it is false and won't work.
Click "ok".
Stop/Start Eudora
Goto "personalities".
Follow the directions for setting up a Cotse standard or SSL email account.
Existing Eudora Settings:
If you want to modify an existing Eudora installation to reflect a more anonymous email setup, follow these instructions.
In Eudora:
Click Tools -> Options
On the left, find "Getting Started", Change the information to reflect the above.
Now, when you send mail with any email address, the "message-id" will not reflect a valid domain or account name. NOTE: The numbers to the left of the message ID are still valid dates. To our knowledge, there's no way to modify this.
You must now go back into "personalities" and setup a new personality with the account settings of your previous "dominant" account. The "dominant" account has been virtually disabled, keeping you from publishing unwanted information in your email headers.
If you use "leave messages on server", setting up this new "dominant" account will require your client to re-download all messages left on the server.
John Holstein (helpdesk@cotse.net)
|
