[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

How to securely read debian-private for sure



Hi,

On Tue, Jun 27, 2006 at 09:22:45PM +0100, Aigars Mahinovs wrote:
> Ian Jackson <ian@davenant.greenend.org.uk> said:
> > I'm one of the small minority of people who have a very negative
> > opinion about gmail.  I realise I'm a bit of a kook on this subject
> > and I'd ideally I'd like to avoid having an enormous flamewar about
> > it.

I claim I was guilty too.  Now I use my local ISP's mailbox.  No better
though.

> > However, it has come to my attention that at least one developer
> > appears to be reading debian-private at their gmail account.
> 
> I am one of those developers. I have never though that such action could
> be considered a violation of debian-private policy and some reasons for
> that have already been raised. In fact I do think that we should encrypt
> the postings to debian-private for both privacy and flamecontrol
> reasons. At this encryption stage headers of the messages should be
> stripped and only stored on the server. Only most important headers
> (like from, subject and date) would be embedded in the encrypted
> payload.
> 
> Unless we go that far and realise such system, I see no reason to single
> out Google on the storage of the mail messages from debian-private.
> 
> Currently GMail is the most trustable mail storage location that I have
> available. And it is also the only location I do use - all my mail from
> all other locations is redirected there. Even if I do redirect
> debian-private mail to another place, that will simply mean that I will
> stop reading it.

Let's make known technical solution more available for all of us.

I know using any external ISP mail box is no better.  I do not have
fixed IP host to get mail stably.  

BSMTP should work. I am talking about debian.net VHOST MX service for DD
here.  This method keeps messages on the Debian machine until you pick
it to your local PC.  So far, I am not successful.

I am writing HOWTO but can anyone help me really doing this.
See:
  http://wiki.debian.org/DebianServiceForDD
This is based on famous old mails:
  http://lists.debian.org/debian-devel/2001/02/msg00965.html
  http://db.debian.org links
  and poking around people.debian.org /etc/exim{4,}

I see only few DD uses this yet.
Yes, we should use this more.

Update of wiki page will be appreciated.

Osamu



Reply to: