Hi Sam,
On 2/13/2021 3:18 PM, Sam Kuper wrote:
On Fri, Feb 12, 2021 at 10:11:20AM -0500, Dennis Putnam wrote:
If I need a secure mailman list, is there another alternative?
You may want to give some thought to, and to then specify in a follow-up
in this thread, what you mean by "secure" in this context.
For example, you might want security properties such as:
- Every message sent to the list can be authenticated by its recipients.
- Every message sent to the list is robustly encrypted to prevent its
being readable by non-members.
- For the property/ies above to be immune to rogue CAs.
- Some combination of the above.
It may be helpful to ask yourself: what is your threat model?
Also, which key distribution mechanisms are available to you? (For
instance: are the list members able to meet in person for key exchange?)
I'm looking to decrypt incoming email from subscribers and encrypt
outgoing to each. The threat model is to not have any email into or out
of the mailing list to be intercepted/monitored.
--
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus
------------------------------------------------------
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/
