Re:Mail-in-a-Box: a mail server in a box
by infogulch on Friday November 24, 2023 @08:46PM
(#38410364)
I guess since you encrypt the whole sqlite db that means you can still offer indexing and FTS while remaining encrypted. But, the application would still have the encryption key in memory. So this protects against an attacker/bad-actor that can access the FS but not if they could access the memory space of the application serving mail items. Is that right?
[ Parent
| on HN ]
Re:Mail-in-a-Box: a mail server in a box
by forwardemail on Sunday November 26, 2023 @01:27AM
(#38419620)
Correct, we offer indexing[0], regexp[1][2], and FTS5[2].
We've put a lot of effort into security hardening (e.g. disabled swap entirely, disabled usb-storage devices, disabled core dumps, disabled apport, etc).
[0]: https://github.com/forwardemail/forwardemail.net/blob/ef67fe...
[1]: https://github.com/forwardemail/forwardemail.net/blob/ef67fe...
[2]: https://github.com/forwardemail/forwardemail.net/blob/ef67fe...
[3]: https://github.com/forwardemail/forwardemail.net/blob/ef67fe...