4 ms·
> What's your threat model? Government action that I'm left in the dark over. If the government is interested in something from my mail servers, I'll see th
by Twirrim 7y ago
> What's your threat model?
Government action that I'm left in the dark over.
If the government is interested in something from my mail servers, I'll see the legal request or judges orders and will know what is going on, and will be able to take appropriate action.
If the government makes appropriate legal threats against Google, I won't necessarily know (National Security Letters) until long after the fact.
- joshuamorton 7y ago> If the government is interested in something from my mail servers, I'll see the legal request or judges orders and will know what is going on, and will be able to take appropriate action. Or the mail servers of the person/people you're communicating with. At which point you wouldn't know, because they'd be subject to the same laws, and less well equipped to fight them.
- kelnos 7y agoIf your threat model includes the US government, then I would expect you would self-host anything sensitive. Even then, there's still the possibility that they could exploit some 0day they've been stockpiling, and root your servers without leaving a trail. Certainly harder than sticking Google with a gagged NSL, but possible. But I don't think most people's threat model includes the US government. Probably not even most news organizations.