Mailpile has an interesting architecture to prevent this. But they are trusting the "server". Something you have to do if you want all the fancy functionality like indexing, search etc. You can encrypt your index,…
As I see it, the JS gets downloaded from the untrusted server, encrypts data on the client and sends it to the server. What makes it impossible for the untrusted server to serve malicious JavaScript? I can't think of a…
If you like to learn a lot about the internals of SMTP and mailservers in general and need/want a super reliable, fast and (if the setup is carefully crafted) secure mailserver - I like qmail. My setup is qmail (SMTP) +…
Mailpile has an interesting architecture to prevent this. But they are trusting the "server". Something you have to do if you want all the fancy functionality like indexing, search etc. You can encrypt your index,…
As I see it, the JS gets downloaded from the untrusted server, encrypts data on the client and sends it to the server. What makes it impossible for the untrusted server to serve malicious JavaScript? I can't think of a…
If you like to learn a lot about the internals of SMTP and mailservers in general and need/want a super reliable, fast and (if the setup is carefully crafted) secure mailserver - I like qmail. My setup is qmail (SMTP) +…