[imp] secure IMP connections

Terry Davis tdavis@birddog.com
Tue, 20 Mar 2001 13:00:59 -0600


haha that is so true,

learn sudo if you are not sure you can trust your administrators.  A general
rule of thumb:
Only one person should know and use root.  Keep your passwords in a sealed
envelope in case you get hit by a truck and they can figure out root at that
point.

-----Original Message-----
From: Rich Lafferty [mailto:rich@bofh.concordia.ca]On Behalf Of Rich
Lafferty
Sent: Tuesday, March 20, 2001 12:57 PM
To: imp@lists.horde.org
Subject: Re: [imp] secure IMP connections


On Tue, Mar 20, 2001 at 01:48:04PM -0500, arijit das (arijitda@netscape.net)
wrote:
>
> The other question I have is about the mail items stored on the server.
> Is there anyway to encrypt that, so that other users who have root access
> will not be able to view the physical files via say telnet ?

If you don't trust root, your data cannot be safe. (The data has to be
read, right? So root can see it in memory. Or root can replace the
program or library that does the encryption with one with a
backdoor. And so on.)

  -Rich

--
------------------------------ Rich Lafferty ---------------------------
 Sysadmin/Programmer, Instructional and Information Technology Services
   Concordia University, Montreal, QC                 (514) 848-7625
------------------------- rich@alcor.concordia.ca ----------------------

--
IMP mailing list: http://horde.org/imp/
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscribe@lists.horde.org