News for hackers. Stuff that matters.
Re:It’s Always Sunny in Reykjavik or How I NSA-Proofed My Em... by rsync on Monday December 21, 2015 @10:43AM (#10771570)
In his "overview of features" he is missing one very interesting and valuable security gain when you host your own mail server:

- local mail delivery does not traverse any network

So if you are user A on a mailserver and your wife/friend/uncle is user B, when you send mail to them that mail is simply a local copy operation (provided they don't POP or IMAP it to a local mailtool).

That's pretty interesting, I think.

It may interest you to know that no piece of rsync.net company email has ever traversed a network - everyone logs in via SSH and uses (al)pine and all internal mail is just local copy ...

Re:It’s Always Sunny in Reykjavik or How I NSA-Proofed My Em... by drzaiusapelord on Monday December 21, 2015 @10:50AM (#10771609)
Well, its going over ssh which uses networking. If you're viewing the email on a networked terminal connection, its still traversing a network as it displays it in pine and that data gets sent over ssh. I don't see why using ssh suddenly makes you immune to these concerns. This is no different than using a rich webmail client over SSL.
Re:It’s Always Sunny in Reykjavik or How I NSA-Proofed My Em... by schoen on Monday December 21, 2015 @11:41AM (#10771912)
Maybe SSH has better cryptographic properties (say, around forward secrecy and key management) than the common options for delivering e-mail remotely over the network. (You could choose the key types and key lengths yourself and choose how authentication keys are stored and when they need to be changed, and you don't have to rely on an external naming or CA mechanism if you distribute fingerprints and authentication keys directly to the users.)