Re: Full encryption

2016-11-14 Thread Karel
> On 2016-11-14 05:34, Peter wrote: > 3. Make sure you have plenty of RAM, and disable swap if you want to > make absolutely certain that plain text won't get swapped out to disk. You don't have to disable swap. Swap partition can be encrypted too, as well as /home, /var or wherever emails are st

Re: Full encryption

2016-11-13 Thread Alice Wonder
On 11/13/2016 05:38 PM, @lbutlr wrote: While I know this would result in lost mail, would it be possible with postfix to setup a mail server that: 1) Only accepts encrypted connections 2) Only sends encrypted emails 3) Keeps mail encrypted throughout, including only writing encrypted blobs. I

Re: Full encryption

2016-11-13 Thread Peter
On 14/11/16 15:51, Noel Jones wrote: >> 3) Keeps mail encrypted throughout, including only writing >> encrypted blobs. >> >> and is there a way to setup an IMAP server to read that encrypted >> mail and, again, only serve/accept encrypted mail. > > For this you can use whatever encrypted filesyst

Re: Full encryption

2016-11-13 Thread Noel Jones
On 11/13/2016 7:38 PM, @lbutlr wrote: > While I know this would result in lost mail, would it be possible with > postfix to setup a mail server that: > See http://www.postfix.org/TLS_README.html Also read up on RFC 6698 and DANE. > 1) Only accepts encrypted connections smtpd_tls_security_level

Full encryption

2016-11-13 Thread @lbutlr
While I know this would result in lost mail, would it be possible with postfix to setup a mail server that: 1) Only accepts encrypted connections 2) Only sends encrypted emails 3) Keeps mail encrypted throughout, including only writing encrypted blobs. and is there a way to setup an IMAP server