Re: At rest encryption (with protected crypto keys)

2020-03-25 Thread Joseph Tam
On Tue, 24 Mar 2020, Kees de Jong wrote: As stated on the Dovecot documentation, at rest encryption is possible [1]. However, these keys are present on the system itself and are unprotected. Therefore, if a system is compromised, the attacker has access to the encrypted mail and the keys. There

At rest encryption (with protected crypto keys)

2020-03-24 Thread Kees de Jong
Hi, As stated on the Dovecot documentation, at rest encryption is possible [1]. However, these keys are present on the system itself and are unprotected. Therefore, if a system is compromised, the attacker has access to the encrypted mail and the keys. There is no security benefit in that