Earlier quoted context omitted.
> I funded this team because they're high integrity software engineers first, and we built this out of need I looked for the founders bio, a company contact info. There is nothing on their site. All I saw was a letter in the "About" section by the founder. You might have gotten to know these guys after various meetings and due diligence process. There is nothing on their website that sells me on trusting them or the…
How would material on a website provide trust, without a means to verify that information?
Helm: Personal Email Server
531–540 of 592 posts
Re: Helm: Personal Email Server
#532Re: Helm: Personal Email Server
#533Earlier quoted context omitted.
> 1. How do they ensure high, non-spam delivery rates to the main email services like Gmail, Fastmail, Yahoo, and Microsoft? I run mail servers. I believe the idea that mail delivery is a problem for small mail providers is largely a myth. If you act somewhat reasonable (that is: if someone complains to you don't ignore it, don't send spam, check your logs for indications someone might put you on a blocklist) it's no…
Same experience. Mostly fine to run your own server. I check the blocklist status of the IP before moving/setting up a new server. We end up on Hotmail/Outlook's blocklist about once a year. They remove it within 1-2 hours after opening a ticket.
Re: Helm: Personal Email Server
#534This is an interesting project. I've been following FreedomBox for ages hoping it would end up as a good way to do this, but development has been slow. I do have some questions about the technical details: 1) Is email access provided through the Helm App, SMTP/IMAP, or is there a webmail interface as well? Can you use this device without a smartphone? 2) Which Linux distro is this based on? 3) What file system is use…
Disclaimer, I'm engaged in The Kinguard Project.
Re: Helm: Personal Email Server
#535I also can't imagine that having a hardware device in-home actually reduces the unit costs of that storage, so if this were an on-line service priced even cheaper, I'd love to pay for it.
My concerns echo those of commenter 'andr'.
Re: Helm: Personal Email Server
#536Earlier quoted context omitted.
They may but they also hold the keys.
I mean, sure? You can use encryption to get security and privacy features but "FDE" isn't it. FDE is more important for Helm but that's a problem of their own design: suddenly the e-mail is in a box in my kitchen and it's a lot easier to walk out with a box in my kitchen than it is to walk out with a drive from us-east-2a :-) For anything in the cloud it's a belt-and-suspenders/compliance thing.
Assuming the software works flawlessly (if it doesn't, it doesn't matter where it runs) you'll need RAM and storage access to recover the keys and the data. If you're in the cloud, you won't notice when insiders or state agencies take a peek. If the device is in your home, you can set it up so you notice.
It all depends on the threat model.
Re: Helm: Personal Email Server
#537Earlier quoted context omitted.
Hi keehun - thanks for posting this on HN! I'm the co-founder and CEO of Helm. 1 - First, we cross reference IP addresses we assign to gateway against known blacklists. This helps ensure emails will be delivered. We also fully support email authentication (DMARC, DKIM, SPF) and configure reverse DNS as well. Lastly, the IP address for a gateway stays fixed so the domain and IP will build reputation over time. Helm se…
> Your Helm server will then initiate a TLS session with the server hosting your recipient's email I'm not sure how Helm doesn't see the metadata: * For outbound (as described) and inbound mail, do all mail servers support TLS connections? I was under them impression that many still communicate unencrypted. * How does Helm avoid seeing the metadata, who is communicating with whom and when?
So, what's the subscription for?
Re: Helm: Personal Email Server
#538Earlier quoted context omitted.
> hey jawns, great question. I'm Giri Sreenivas, co-founder and CEO of Helm. To answer your question, ISPs block port 25 and email service providers typically reject emails coming from residential IP blocks. > To build a plug and play solution, we knew that our server could not require listening for inbound connections on a residential internet connection. So we set about looking into how we could route traffic to an…
We don't believe it does. ISPs will only see encrypted traffic (a VPN tunnel to the gateway) so it's unclear how they will figure it's associated with a server.