Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Email at FastMail is encrypted at rest in this sense (full drive encryption).

It's not encrypted with a separate password per-user. We don't see any security benefits there, given that every user logs in almost every day, and if they have linked a device (many of our users use IMAP from mobile clients) they will connect and sync every time there's an update.

Which changes the vector to "hack server, passively monitor for a couple of hours, gain access". The logical backflips and single-minded security outlook required to consider that significantly different from "hack server, gain access" are the kind of security theater we studiously avoid.

Full disk encryption is a clear win with no significant downsides (slightly higher CPU consumption). Per-user encryption while still providing a full email service is not a clear win, and it has significantly higher downsides.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: