Re:Helm: Personal Email Server
by jwilcoxson on Wednesday October 17, 2018 @02:41PM
(#18242259)
I don't see how we should automatically trust them because we "own" the hardware. If its not open source and able to be verified by third parties, what does it matter if we have the "keys"? $500 for proprietary hardware just seems odd considering the goal here.
Re:Helm: Personal Email Server
by bostonvaulter2 on Wednesday October 17, 2018 @04:15PM
(#18243323)
How could it NOT be a hardware play? Then how else can you verify and trust that you know what code is running in some datacenter in who knows where?
It doesn't matter what code is running server side, as long as decryption happens client side and the keys are never transmitted to the server.
If you want to truly control your data, you've got to control your hardware too. See: Lavabit.
But going all the way to the end of that tradeoff is so expensive. It seems like a Helm VM would be 90% as secure and also 90% cheaper.
I still don't understand why this is a hardware play. There are advantages to owning the hardware but none of those advantages seem to apply here.
The hardware feels like a bit of an albatross.