Re: Store data encrypted in maildir

2015-08-25 Thread Niels Dettenbach (Syndicat.com)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am 25. August 2015 15:53:03 MESZ, schrieb Bron Gondwana : >So we just say "trust root on your mail server" Ack, if a user want end-to-end encryption, he has to use / do end-to-end encryption. Even if you trust root of your mail ISP - at least most

Re: Store data encrypted in maildir

2015-08-25 Thread Bron Gondwana
We do that at FastMail. The problem is that the filesystem needs to be mounted for Cyrus to access it, and then root can access all the files. If you want to have a system where root can't access files... you're basically looking for non-unix or you're doing horrible hacks on top of unix which

Re: Store data encrypted in maildir

2015-08-25 Thread Dan White
On 08/25/15 11:55 +0530, Ram wrote: >Is there a way I can store cyrus imap mails encrypted. This may not be >a fully secure system >but I just need something so that a root logged in user cant trivially >read the files If you're in a controlled environment, use end-to-end encryption (e.g. OpenPGP

Re: Store data encrypted in maildir

2015-08-25 Thread Ken Murchison
Try putting your Cyrus partition(s) on an encrypted filesystem. I've never tried it but I'm pretty sure its possible. On 08/25/2015 02:25 AM, Ram wrote: > Is there a way I can store cyrus imap mails encrypted. This may not be > a fully secure system > but I just need something so that a root l