I am helping a journalist team to communicate securely with their sources.
My recommendation has been to start with Tails.
One of the things they need is Dropbox functionality over Tor: They need to share a directory with their team and another directory (possibly a subdir) with each of their sources.
It has to be safe: If an attacker gets hold of the USB drive he should not be able to access any decrypted data.
It has to be usable for journalists with limited IT-knowledge:
- Preferably a single passphrase to open the USB drive and then everything just works.
- A simple way of adding a team member (with full access to the dir) and a source (with full access to the subdir).
It is acceptable if one of the team members needs to stay online all the time, as long as this machine can stay in a mode that has no access to decrypted data (similar to an untrusted server).
Has any such functionality been tested to work with Tails?