From Newsgroup: alt.privacy.anon-server
YAMN Web 2 is available at:
https://yamnweb.virebent.art http://ai63yqfo2wu2j3ey7nmatyel52jjvcmfg4e4kkxp2y7x3bc6nue6czyd.onion
It is a send-only web interface for anonymous email and Usenet posting through Nym and the YAMN remailer network.
Privacy and security measures include:
- Dedicated Apache HTTPS and Onion virtual hosts with access logging disabled
- HTTPS redirection, restrictive CSP, no-referrer policy, frame denial and MIME-sniffing protection
- No accounts, inbox, message retrieval or reply storage
- CSRF protection and secure, HttpOnly session cookies
- Message processing in RAM without temporary message files
- No message bodies, recipients or sender identities in operational logs
- Payload-free operational status logging only
- An encrypted YAMN envelope is created before entering the Nym mixnet
- The Nym transport receives the opaque envelope, not separate message fields
- Three YAMN roles: Entry, Middle and Exit, with each remailer opening only its own encrypted instructions
YAMN cryptographic primitives include NaCl box using Curve25519 and XSalsa20-Poly1305 for per-remailer headers, AES-256-CTR for nested packet layers, BLAKE2s-256 for integrity and anti-tag checks, and fresh random keys, nonces, IVs, identifiers and padding for every envelope.
Remailer statistics and public keys are retrieved through Tor only when local data is missing or older than 24 hours. Current data is reused immediately to keep the interface responsive.
This is server-side YAMN encryption, not browser-side end-to-end encryption. Plaintext exists briefly in PHP and the local encoder memory, and the final YAMN Exit necessarily recovers the SMTP message for delivery.
Architecture and limitations:
https://yamnweb.virebent.art/about.html
Votre
*Gabx*
--- Synchronet 3.22a-Linux NewsLink 1.2