27 Apr
2013
27 Apr
'13
11:18 a.m.
Daniel Kahn Gillmor writes:
If mailman is storing messages on-disk in an encrypted form, Stefan's proposal mitigates the threat of an adversary with offline access to the disk (e.g. in the event of server theft or seizure)
OK, it does that.
But in the event of that kind of threat, I think you also need to protect the logs and lists. I guess you can deal with the logs by the simple expedient of not keeping them.