Hi, I'm wondering how Piler can protect against tampering with mails?
As far as I understand, Piler encrypts all messages with Blowfish (symmetrical encryption, key derived from piler.key coupled with initialization vector taken from iv=... setting in piler.conf) and creates checksums for header and body that are stored in the metadata table in SQL, so something like filesystem corruption or simply replacing a file (without touching the database) will be noticed upon retrieval. That leaves only the SQL database as the (inevitable?) weak spot, as I can easily let mails disappear or replace an existing mail with arbitrary content (as long as I remember to update the checksums in the corresponding metadata table row). (Solution: regularly dump SQL database to WORM mediums to be able to spot such malicious attempts?)
Is all of that correct or am I wrong somewhere? Best regards, Patrick
