Earlier quoted context omitted.
Using a hardware root of trust, secure boot and a Secure Enclave for managing keys used for full disk encryption, it will be very difficult to extract decrypted data from a Helm server. The keys never leave the Secure Enclave, they aren't available to the application processor or memory. Most cloud-based email services hold email in the clear - we believe this means you don't really own your data. Encrypted email ser…
Hang on: are you suggesting cloud e-mail services don't use FDE?
Helm: Personal Email Server
421–430 of 592 posts
Re: Helm: Personal Email Server
#422Earlier quoted context omitted.
I'm so glad to be living in Europe. Germany's third biggest city, I can only get 50/10 Mbit, maybe 100/20 - no fiber in sight. No static IP and no guarantees anyone will accept mail from this dialup subnet. /s
In Germany, with Unitymedia Buisness, I get symmetric 100Mbit/sec over coax (even in mid-size cities), a static IPv4 adresse and excellent customer service. Price tag: 35EUR/month.
Re: Helm: Personal Email Server
#423Earlier quoted context omitted.
I'm so glad to be living in Europe. When it comes to consumer internet services, the US is a 3rd world country, which is kinda odd considering most of the western world does their business there. I just checked the terms on my 300/300 fiber connection, as well as my (backup, company paid) 25/5 ADSL. They're almost identical: * no spamming. * no racism/unethical behavior. * no portscanning. * no illegal downloads/uplo…
The telcos only enforce the server rule if you are causing problems like doing something illegal, torrenting, or maxing out your bandwidth 24/7. I’ve had multiple servers running over the years and never had any issues with Comcast or AT&T. Generally they don’t care if it’s for personal use. I’ve heard of them shutting people down for something they saw as business related. They didn’t really get shut down, it was mo…
Re: Helm: Personal Email Server
#424Earlier quoted context omitted.
I'm so glad to be living in Europe. When it comes to consumer internet services, the US is a 3rd world country, which is kinda odd considering most of the western world does their business there. I just checked the terms on my 300/300 fiber connection, as well as my (backup, company paid) 25/5 ADSL. They're almost identical: * no spamming. * no racism/unethical behavior. * no portscanning. * no illegal downloads/uplo…
I'm so glad to be living in Europe. Germany's third biggest city, I can only get 50/10 Mbit, maybe 100/20 - no fiber in sight. No static IP and no guarantees anyone will accept mail from this dialup subnet. /s
Re: Helm: Personal Email Server
#425Don't most ISPs ban residential accounts from running something like this? Comcast terms: > use or run dedicated, stand-alone equipment or servers from the Premises that provide network content or any other services to anyone outside of your Premises local area network (“Premises LAN”), also commonly referred to as public services or servers. Examples of prohibited equipment and servers include, but are not limited t…
You are misleading us by editing out the rest of the sentence. What you stated is for dial-up service. AT&T terms: >• with respect to dial-up accounts, using any software or device designed to defeat system time-out limits or to allow Customer's account to stay logged on while Customer is not actively using the IP Services or using such account for the purpose of operating a server of any type; I have many servers on…
Re: Helm: Personal Email Server
#426Interesting product with great potential. Their website doesn't seem to address my two main concerns: 1. How do they ensure high, non-spam delivery rates to the main email services like Gmail, Fastmail, Yahoo, and Microsoft? 2. How would the product work in case Helm the company/service goes away (or even just service outage)? Can the device work on its own without the need for their web service (perhaps with lower d…
Hi keehun - thanks for posting this on HN! I'm the co-founder and CEO of Helm. 1 - First, we cross reference IP addresses we assign to gateway against known blacklists. This helps ensure emails will be delivered. We also fully support email authentication (DMARC, DKIM, SPF) and configure reverse DNS as well. Lastly, the IP address for a gateway stays fixed so the domain and IP will build reputation over time. Helm se…
A) I can connect directly, no biggie.
B) I am assuming that you would require a port opened/forwarded in the firewall to work in this case. Is this correct?
Re: Helm: Personal Email Server
#427I never understand why people think having your files physically in their homes is somehow more secure than a data center. - You run the risk of hardware failure, which would take days to recover. When your warranty expires, it'd cost you, too. - Disk failure may lose all your data. - Fire, theft, or hurricanes may destroy it. - You still give access to your data to a company, which controls software updates and the…
I think the only times I lost data in the last 10 years or so was because someone accidentally deleted stuff on a shared Dropbox (luckily I had a local backup, so only the most recent changes got lost). Oh and I lost some photos that I uploaded to a Facebook clone because they more or less shut down. Data loss is more or less a solved problem. You don't need Google for that. ;-) On the other hand, even without puttin…
Re: Helm: Personal Email Server
#428Earlier quoted context omitted.
Microsoft is the toughest one. Fortunately, I don't have friends that use outlook.com or w/e
Does your email get blocked if it is sent to a business on O365?
Some things that should be delivered are not. I'd have to dig back into this to see what the exact issue is.
Re: Helm: Personal Email Server
#429Earlier quoted context omitted.
> Your Helm server will then initiate a TLS session with the server hosting your recipient's email I'm not sure how Helm doesn't see the metadata: * For outbound (as described) and inbound mail, do all mail servers support TLS connections? I was under them impression that many still communicate unencrypted. * How does Helm avoid seeing the metadata, who is communicating with whom and when?
WRT to TLS, see here: https://transparencyreport.google.com/safer-email/overview?h... It seems that Helm has no obligation or business need to log any metadata if they are providing each customer with a dedicated relay. Any abuse will come from that relay IP and can trivially be attributed to the correct customer.
* Name, address, payment information, domain, DNS records
* Device diagnostics (such as temperature), software versions, enabled services, connection status, connection type, serial number
* Anything related to customer support, including information customers provide
So plenty of information to uniquely identify a system. The last bullet is a little concerning as it seems to be a catch-all.
Re: Helm: Personal Email Server
#4301) I’d need to feel secure my email would actually deliver correctly. Zack Whittaker on Twitter [1] mentioned that the CEO’s email wound up in his Gmail spam folder. This would be utterly unacceptable for me, even though I don’t frequently email new people.
2) The single domain per server totally makes this DOA for me. I have multiple domains with separate, non-aliased mailboxes, controlled via legacy GApps accounts. It winds up being a security advantage because I use different accounts/domains for different services and that means that the likelihood of me being severely hacked is lower as a result. But beyond that, a single domain designation seems off for this type of product. The people willing to spend $500 on this kind of hardware are the people who have multiple domains.
3) I worry about the long term future of a startup like this. If they go out of business, not only is my hardware now worthless, I now have to migrate my inboxes to Fastmail or GSuite or something else, or face configuring my own local mail server, which is what I was trying to avoid to begin with. And in my case, that would also potentially mean giving up grandfathered GApps accounts with 50 users and custom domain support.
I wish Helm luck and we need disruptive email startups and better turnkey hosting solutions, but I’m not sure this is the right solution at the moment.
[1]: https://twitter.com/zackwhittaker/status/1052619938349899776...