-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Am 25. August 2015 15:53:03 MESZ, schrieb Bron Gondwana :
>So we just say "trust root on your mail server"
Ack,
if a user want end-to-end encryption, he has to use / do end-to-end encryption.
Even if you trust root of your mail ISP - at least most
We do that at FastMail.
The problem is that the filesystem needs to be mounted for Cyrus to access it,
and then root can access all the files.
If you want to have a system where root can't access files... you're basically
looking for non-unix or you're doing horrible hacks on top of unix which
On 08/25/15 11:55 +0530, Ram wrote:
>Is there a way I can store cyrus imap mails encrypted. This may not be
>a fully secure system
>but I just need something so that a root logged in user cant trivially
>read the files
If you're in a controlled environment, use end-to-end encryption (e.g.
OpenPGP
Try putting your Cyrus partition(s) on an encrypted filesystem. I've
never tried it but I'm pretty sure its possible.
On 08/25/2015 02:25 AM, Ram wrote:
> Is there a way I can store cyrus imap mails encrypted. This may not be
> a fully secure system
> but I just need something so that a root l