1190162 - Add riseup.net (already self-hosted)

Status: RESOLVED WORKSFORME

(Webtools :: ISPDB Database Entries, defect)

Description

[Praveen A]

autistici.org is one of the recommended email providers in prism-break.org and its usage has increased after snowden leaks.

Please add this info
http://www.autistici.org/en/stuff/man_mail/thunderbird.html

Another community run email provider known for privacy riseup.net is also missing.

https://we.riseup.net/riseuphelp+en/thunderbird-imap

Comment 1

[Andrew Sutherland [:asuth] (he/him)]

(In reply to Praveen A from comment #0)
> autistici.org is one of the recommended email providers in prism-break.org
> and its usage has increased after snowden leaks.
> 
> Please add this info
> http://www.autistici.org/en/stuff/man_mail/thunderbird.html

autistici.org seems to have gone with creating their own Certificate Authority (http://www.autistici.org/en/ca/index.html) and although they've thought it through a bit (recommending using Certificate Patrol), asking users to install an unconstrained CA (that is, not limited to subdomains of a certain root, etc.) with no description of the security used to protect the signing certificates and delivering it over http is a horrible idea.  But the root issue going forward is that we're not going to add hosts to the ISPDB that aren't valid under the default trust set by NSS/Necko.  (And DANE is our hope going forward for the CA trust problem.)

There does seem to be an autoconfig.autistici.org domain, just not hosting an ISPDB entry.  So with a little incremental work they can self-host and Thunderbird at least will pick that up (https://developer.mozilla.org/en-US/docs/Mozilla/Thunderbird/Autoconfiguration#Configuration_server_at_ISP).

> Another community run email provider known for privacy riseup.net is also
> missing.
> 
> https://we.riseup.net/riseuphelp+en/thunderbird-imap

There is already a self-hosted entry at https://autoconfig.riseup.net/mail/config-v1.1.xml so we don't need to do anything unless riseup supports vanity domains via MX forwarding, in which case, the autoconfig process unfortunately won't find the self-hosted entry.