TL;DR: It's $199 to $399 for a plastic case literally just containing a Raspberry Pi 3 Model B, running an outdated Raspian, and the software stack is extremely poorly developed. eg: their "secure handshake between devices" is basically two devices serving SMTP on port 26 instead of port 25.
An analysis of the Nomx secure communications device
11–20 of 77 posts
Re: An analysis of the Nomx secure communications device
#12I don't understand the point of this, even if it worked correctly. If I understand correctly what it does is create some kind of secure tunnel between two nomx devices if you tell it to. But doesn't starttls do that already if you configure your mail server that way? And it already just works with any compliant email server? So unless I'm missing something there's absolutely no doubt in my mind that this is a scam. K…
This kind of agreed upon enforcement has been possible in many email products for years though (I worked on one which could do it about 10 years ago).
Re: An analysis of the Nomx secure communications device
#13That will be an easy win for whoever submits first.
Re: An analysis of the Nomx secure communications device
#14TL;DR: It's $199 to $399 for a plastic case literally just containing a Raspberry Pi 3 Model B, running an outdated Raspian, and the software stack is extremely poorly developed. eg: their "secure handshake between devices" is basically two devices serving SMTP on port 26 instead of port 25.
Its port 26 enforces TLS though.
Re: An analysis of the Nomx secure communications device
#15I don't understand the point of this, even if it worked correctly. If I understand correctly what it does is create some kind of secure tunnel between two nomx devices if you tell it to. But doesn't starttls do that already if you configure your mail server that way? And it already just works with any compliant email server? So unless I'm missing something there's absolutely no doubt in my mind that this is a scam. K…
I guess there's some theoretical benefit possible there but if you're worried about your ISP reading your email, just use GPG.
Re: An analysis of the Nomx secure communications device
#16Can't wait for their $10k bounty program to go public. That will be an easy win for whoever submits first.
Re: An analysis of the Nomx secure communications device
#17Re: An analysis of the Nomx secure communications device
#18TL;DR: It's $199 to $399 for a plastic case literally just containing a Raspberry Pi 3 Model B, running an outdated Raspian, and the software stack is extremely poorly developed. eg: their "secure handshake between devices" is basically two devices serving SMTP on port 26 instead of port 25.
Its port 26 enforces TLS though.
It provides encryption, but no authentication nor authorisation. In short an ever so slight improvement over normal SMTP.