Support usage of decentralysed messagging systems

Problem to solve

E-Mail is overcentralised, the ones holding large servers can dictate its users own condition, like mobile phone verification. All email providers I know push it hardly, and nearly all require. In some states (like Russian Federation) there may appear a law according to which any email provider not doing phone or ID verification must be either shut down (if it is in its jurisdiction) or blocked (if it is in another jurisdiction) by enlisting into a state-wide blocklist, etc. In Russian Federation there is already such a law about messengers (Viber, Telegram, WhatsApp), also requiring them to provide to FSB (Russian government agency doing surveillance) crypto keys needed to message decryption. The law is extremily broad and IMHO email providers are also match the definition of a messenger.

Even more harsh conditions like mandatory browser and device fingerprinting (was already "advised" to be implemented by banks), biometric verification (mandatory for banks) or ban on interfacing with other messengers not having these measures (the similar condition has the law banning VPNs and anonimizers which have not implemented blacklists by RKN) may be further pushed.

It is obvious that if a email service I use will be pushed to require phone validation (in fact it's not a very big limitation for them since I have bought goods in e-shops, which have sent me emails containing my home address, so it's easy to fing out mynidentitynfor a email provider, but it is a principial position that I don't use any non-financial services requiring phone validation) I will have to leave it. There is a problem: my most valuable accounts are tied to it. So we need some solution to allow services send me messages without email.

Fortunately there are some crypto-based decentralysed email systems like Tox and BitMessage (unfortunately none of them had a security audit, and a backdoor had been spotted in BM only after a its maintainer have been hacked).

I guess we need GL support them as an alternative mean of message delivery. Please note that the daemons need to be isolated from the rest of infrastructure in a separate full VM and since they may be insecure.

Links / references

Edited by KOLANICH