Odd blog post.
Talks about "NSA-proofing email" and doesn't mention PGP, GPG or S/MIME.
Should be titled "How to set up a mail server with SMTP and IMAP". Seems only peripherally connected with protecting email from snooping in any way.
Talks about "NSA-proofing email" and doesn't mention PGP, GPG or S/MIME.
Should be titled "How to set up a mail server with SMTP and IMAP". Seems only peripherally connected with protecting email from snooping in any way.
If I care that much about the content of an e-mail it will be encrypted or I will tell the person via other means. I assume everything I send via e-mail to be available to 3 letter agencies all over the world, regardless of what server I use.
Emphasis is privacy and compliance, not security.
The problem here is that it is very difficult to protect yourself when you don't understand your adversary's capabilities. We need transparent legislation and accountability in both government agencies and tech industry corporations. A lot of this advice boils down to an assumption that the NSA/DOJ/FBI will "play fair", and there is really no reason to expect them to do that.
[1]: https://ssd.eff.org/3rdparties/govt/stronger-protection [2]: http://youtu.be/HHoJ9pQ0cn8
Hmm...good point. We really need an open-source ISP for privacy to start to work. A fool-less system where the executing code is available to the public with read-only access with write permissions to appointed admins.