Am I Doing It Right?

[whoisnix]

Hello!
Im new to VB and Whonix system so i need to check if im doing it right.

Turn computer on> Start my VPN > Start Whonix Gateway> Start Whonix Workstation> Surf “anonymously” on the workstation.

When im finished

Shutdown whonix> Continue surfing like normal but VPN still on.

Is it right or should i change something?

Also, is countermail safe and how do i get it to work on Whonix?
Do i need to disable anything els before i start the VB?
What happens if i accidentaly opens IE besides the VirtualBox?

Thank you

[Ego]

Good day,

Is it right or should i change something?

No, everything fine, don’t see any potential issues arrise.

Also, is countermail safe

Hard to tell, as a lot of “security conscious” email providers turned out to be rather bad actually, riseup is one of the only rather recommendable mail services.

how do i get it to work on Whonix?

Unless they use some proprietary technology (in which case avoid them) like any other mail provider, as explained here: https://www.whonix.org/wiki/E-Mail

Do i need to disable anything els before i start the VB?

No.

What happens if i accidentaly opens IE besides the VirtualBox?

Regard this: https://www.whonix.org/wiki/DoNot#Do_not_use_clearnet_and_Tor_at_the_same_time.

Have a nice day,

Ego

[whoisnix]

Thank you for the answer.

Regarding Countermail. It uses Java, but even if i allow java on the site it wont work.
Anyone knows the problem?

Also about not shutting down anything before i start VB. Dont i have any programs running in the background that uses internet that can confuse?

[Ego]

Good day,

Regarding Countermail. It uses Java, but even if i allow java on the site it wont work.

Sorry, but any provider how necessitates the use of Java is no good provider. I’d recommend using another one.

Dont i have any programs running in the background that uses internet that can confuse?

The problem here is only the user. Anything running in the background automatically can’t leak, as these are seperated by software.

Have a nice day,

Ego

[entr0py]

is countermail safe

For any PGP-based Webmail provider, just ask:

1. Does website need to access my GPG Private Key?
2. Is the code open-source so I can see what they’re doing with my Private Key?
3. What precautions are in place so code is not maliciously or intentionally altered?

If you’d rather not blindly trust random people with your Private Key, you can use non-encrypted mail providers and do the PGP encryption yourself using:

1. Icedove + Enigmail
2. Webmail + manual PGP encryption (ie KGpg Editor, GEdit Plugin)