Re:Deploy a Gmail-like email server in 30 (ish) minutes
by AshamedCaptain on Sunday December 26, 2021 @06:05PM
(#29697233)
There is a large difference between "them" having to m2m smtp sessions to intercept emails versus directly sending the emails through them.
Besides, metadata is probably already more significant than the message contents and encrypyion solves nilch there.
Re:Deploy a Gmail-like email server in 30 (ish) minutes
by teitoklien on Sunday December 26, 2021 @08:05PM
(#29697950)
they m2m the imap sessions using the method i described not smtp.
Most providers do not mandate a strong SSL only imap system.
Along with other similar caveats, do not depend on your mail system to keep your emails private.
If you want privacy, encrypt your emails yourself.
Also most people who selfhost their email usually do not encrypt data at rest. As its not the default norm. As such anyone having access to your disk can compromise you at anytime too (especially likely if you’re using a vps).
So, unless youre encrypting your emails yourself E2E. Assume you have no privacy. If you’re doing E2E, aws cannot decrypt your mails anyways.