Secure Mail for Devs | Hacker News Reader

Secure Mail for Devs

developermail.io

58 pointsDaGardner22 comments

Looks interesting, but without more details on what you can configure or how much it will cost, it's hard to get excited.

yes agree. a little bit more information would be nice

I find it really annoying if you have to watch a 1:20 minute video just to get a rough idea how their service works.

The entire video is simply a terminal session, not even doing any curses-like. Why not just paste the terminal session output in a <pre> block? Would have saved me 1:15.

Also, bug report: If you seek to very close to the end, the timer shows 1:21 and keeps counting with nothing happening on the screen... I was wondering why he didn't hit enter after typing "ls matte" and let the timer run to 2 minutes...

It says secure, but I see no mention of encryption or legal protections that would make it so. If you're going to use the word 'secure', it has to mean more than "hosted in a country that is known to bow to the USA."

Their FAQ mentions luks. I guess, their storage is encrypted.

But how is it decrypted after booting? Is the service down until they login and mount the drives manually?

Hey, Chris & Matt here. We are the guys behind developermail.io and we really appreciate all your comments and feedback! We are in a private beta phase at the moment and will be sending invitation keys to more people very soon.

There were a lot of questions regarding security and privacy, so we preponed the release of the updated website. Please check it out and let us know what you think: developermail.io

You can reach out to us at support@developermail.io also.

Have a great week and thanks for your support! Chris & Matt

We want to build an awesome product! Can you help us by taking the following survey: http://goo.gl/forms/KHp5BimFs6 (takes ~3 minutes)

>Our __bare-metal__ servers are located in Germany.

I've seen this term used a lot recently to describe dedicated servers, even Leaseweb does it now. Someone please tell me why.

They're saying that as opposed to virtual servers or server instances, they have actual physical servers.

This isn't a recent term at all? Back in the 90's people were selling dedicated, unmanaged hardware as "bare metal" servers. Bare metal simply refers to the fact that they're handing you an assembled server only -- you need to install an OS and configure it.

"Hosted in Germany" is a good selling point, and that is incredibly sad to me. America has lost so much in just 15 years.

Is it a selling point with much substance, though? Genuinely curious. Seems to me that if the American government wanted your data for some reason, obtaining it from Germany wouldn't be so hard.

I am not an expert on these matters, but I would imagine that the process for legally obtaining data from foreign countries is both more difficult and more public (a National Security Letter would have no teeth in Germany). Additionally, Germany has a better reputation (perhaps unearned?) for privacy rights, especially as the greatest pillar of the liberal EU, and because when the NSA bugged Merkel's cell phone they soured the intelligence relationship considerably.

I live in Germany. It appears to me that the outrage from the government was largely theatre for the public, than serious. There is an election coming up.

I'm not German, but I understand Germany is very strong in the personal rights department and have a serious separation between government and state, which minimizes the influence of the gov-of-the-day on business matters -- maybe I'm wrong here (again: not German), but I understood Merkel's government freaking out about the possibility of Snowden asking asylum in Germany because, despite the governmental dislike, it was a State affair and they couldn't do nothing to prevent it if he reached German territory.

Anyway, I feel Germany is a wonderful country and this kind of marketing is somewhat of a international recognition for that.

Postfix when installed has pretty good defaults and works safely pretty much out of the box. Are people actually looking for third-parties like developermail when it's really not that hard?

What about spam? What about antivirus? What about mail filtering rules?

Something like Sovereign[1] is your friend then

[1] https://github.com/al3x/sovereign

While I agree with other posters that there could be a bit more information, I think the git based config is a pretty interesting approach.

Nice work guy, look forward to seeing it a bit more fleshed out.

I'd like some more info on the security side.

Reply on news.ycombinator.com