asdafa
Joined 13 years ago
Joined 13 years ago
I understand that this thing is intended for development environments, but to be honest in 2014 with all the container awesomeness we're seeing recently, it doesn't make sense, and if the first thing I see in that script is "rm ~/.ssh/known_hosts" I can't be attracted to the project.
Edit: Grammar.
You should consider all servers running a vulnerable OpenSSL installation to be compromised. You'll need to rekey all your certificates.
Do not trust the fact that "the servers are internal" because if your perimeter has been breached you will most likely know only after the fact.
Personally, I tend to treat internal services with the same process I use for external services, they just come second on the list.
For anyone that might be looking for context: http://knowyourmeme.com/memes/events/c-plus-equality-c
The interesting thing is that they mention how many startup were registered but not how many of them survived their first year. Few friends of mine tried to stay in Italy and they're now struggling just to get some money home. Most of them had to go back living with their parents because none of these measures worked and are currently employed and with humongous debt with Equitalia (the italian IRS).
(sorry, i could not resist)
However forget about the second optional requirement. The way the SMTP works, means that at some point your email messages must be read and processed by the server, if you can't trust it, you already lost. The only way to be "safe" in that regard is to encrypt the payload with GPG as already suggested.
Furthermore, server-side encryption of your stored emails is indeed possible, but it will render impossible for the provider to offer basic functionalities like search in the web ui.
If you're really concerned about privacy issues and really want all your email encrypted you might be better off self hosting your own mail server, but be warned if you don't know what you're doing and you don't take proper care of it, you'll end up in a situation that is even worse than using something like gmail.
With the release of podman 4.6.0 a lot of the issues have been sorted out, podman-desktop is still shipping engine 4.5.1 at the moment, but a new release should be coming out soon. I'd suggest you give it another shot.