Live data from Hacker News

Helm: Personal Email Server

thehelm.com

581–590 of 592 posts

Re: Helm: Personal Email Server

#581
Good luck with AWS/Azure IP addresses. Most cloud providers have their entire IP blocks of compute services (VM, etc.) blacklisted by the majority of DNSBL and antispam actors. If the EC2 instances act as the last outgoing relay (the last IP) you will encounter email being rejected by recipient mail servers at some point.

Best solution is to have your own AS number and IP ranges and your own hosting.

Re: Helm: Personal Email Server

#582

I'm not usually one to theorize spying, but I'm gonna call it here: I'm betting that "remote administrative access" is found between the EC2 instance and the at-home box. My first thought in seeing gsreenivas' discussion about the VPN/iptables/EC2 is that the physical box at home makes it feel more secure than an EC2 solution, but I'm not sure that is actually the case.

there is no remote administrative access from the EC2 instance or anywhere

Re: Helm: Personal Email Server

#583
post #261

Wait, how does this hardware stacking work? Anyone have photos of the actual product? This all looks rendered.

It almost looks like there's a port in the top that expansions attach to. However, in the specifications, there is no expansion port listed. This makes me think that stacking is simply stacking, then we use a usb cable to attach the pieces.

There is no cable for stacking. The expansion units expose a USB-C male connector and plug into the base unit's USB-C female connector.

Re: Helm: Personal Email Server

#584

This is cool guys. Kicking things off at the right time as well. However think I might be missing a few things. 1) Wasn't the whole point of email moving to the cloud to enable access on any device anywhere? If I move my email to Helm can I still access it on the go? 2) Assuming I can access it on the go. I'd need pretty fast upload speeds right? I live in Australia, and our internet is god awful.

1.) it is globally accessible through the gateway it connects to 2.) for email services, you don't need much in the way of bandwidth for this to work very well.

Re: Helm: Personal Email Server

#585
post #437
post #433

Earlier quoted context omitted.

Unfortunately reputation management is a requirement nowadays for all senders of MTA. And it's an ongoing hassle. Helm promises to handle this in a way that doesn't let them read transmitted mails. You still have to trust them ultimately, but the stakes are higher.

The only Helm EC2 instance I've seen listens on 587 and 993, which seems incongruent with that promise.

You missed some other ports including 25.

Re: Helm: Personal Email Server

#586

Earlier quoted context omitted.

Now this is interesting... Appreciate it

Or https://www.iredmail.org/ or https://cloudron.io and https://mailcow.email/

Cloudron.io is closed source and hosted, I believe.

Mailcow only does smtp and pop/imap, no dns, CardDAV and CalDAV.

Iredmail looks neat!

Thanks!

Re: Helm: Personal Email Server

#587
post #586

Earlier quoted context omitted.

Or https://www.iredmail.org/ or https://cloudron.io and https://mailcow.email/

Cloudron.io is closed source and hosted, I believe. Mailcow only does smtp and pop/imap, no dns, CardDAV and CalDAV. Iredmail looks neat! Thanks!

It's not hosted - you install it on your server. https://cloudron.io/get.html. Why is closed source an issue? gmail, helm etc are all closed...

Re: Helm: Personal Email Server

#588
post #437

Earlier quoted context omitted.

The only Helm EC2 instance I've seen listens on 587 and 993, which seems incongruent with that promise.

You missed some other ports including 25.

That wasn't intended as a complete list? Elsewhere I also mentioned the mystery HTTP services on something like 8443 (but that's to wit).

Re: Helm: Personal Email Server

#589
post #545

Earlier quoted context omitted.

On a VPS, full disk encryption is not effective because the keys can be dumped from the hypervisor.

Not to mention having to wake up in the middle of the night when the VPS provider decides to reboot your VM so you can decrypt the volume on boot. Been there, done that for years.

not a problem for SMTP, which is store-and-forward.

Re: Helm: Personal Email Server

#590
post #304

Earlier quoted context omitted.

> Helm has no obligation or business need to log any metadata The point of Helm is to provide privacy (and end-user control) through technical means, if I understand correctly. If it's just a matter of trusting motives, I don't need a home server.

I disagree. Seizing data stored on a server in your house is much, much more difficult that seizing data stored on a cloud server.

nope. it's only fractionally more difficult as "the man" has to physically come to your house.

additionally, email is more usefully between 2+ parties. For normal people, the other parties are very likely to be using a cloud email provider. I would not be surprised to learn that it is common to issue a warrant not for a specific recipient, but for anyone that has corresponded with a specific person, ie for the sender instead of the receiver -> google, give me all emails sent by user@foo to any user on your server.

this is actually a big problem of SMTP and a big weakness of helm. i didn't study the product but it seems that it would be difficult for a user to know (and prove) that another user is a helm'er. if data seizure is the issue you care about, protonmail and other such services are a better solution.

Post reply on HN