On: Helm: Personal Email Server

[sjs382]

With public key encryption, a cloud provider doesn't need your private keys to encrypt data that can be only viewed by you—they need your public key.

In the parent, the private keys are not on the premises of the cloud company.

[hawski → sjs382]

I may not understand how things work, but how can a SMTP server function without private keys? How can it pass the hand shake? Does parent describes different scenario?