> Setting up a server in any hosting environment at this point comes with the assumption that its contents can be read at any time by the operators and whoever

> Setting up a server in any hosting environment at this point comes with the assumption that its contents can be read at any time by the operators and whoever they let in without you ever knowing about it. Indeed. If you want to be secure, you need to keep your email server at home, or in some other location you trust, and make sure all communication on the net is encrypted. That way, if an adversary wants your secrets, they will have to burgle your house. > That's still a lot better than Gmail. True, because it takes effort for GCHQ/NSA/whoever to look at your server, which they probably won't do. > Going beyond that to something with a whole lot more encryption and less of an ability for hosting providers to read your data would really require a product dedicated to that end: that is hard to get right That's what I'm working on.