Skip to content

mail-crypt implementation #1370

@snoopotic

Description

@snoopotic

Recently, by default, all E-Mails (using postfix/dovecot) are stored unencrypted. So if someone has access to the mail directory/filesystem backend, they could read the e-mails.

As solution, I‘d like to suggest to use the mail-crypt plugin:
https://doc.dovecot.org/main/core/plugins/mail_crypt.html

This could be made configurable and also global or user based encryption would work. I‘d personally suggest to use the directory/user based one and use the user password for the key unlock-password as well.

It would need an implementation to change the key as well when the user changes his password. It would also possibly need an initial key in read-only-mode if something got wrong to be able to read older e-mails. (We may need to think/discuss about that more if the idea/request is accepted.)

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions