```To prevent theft of correspondence (in the event of a compromised account or server) the messaging service must store only messages that have not yet been delivered or returned as undeliverable.
Where archiving is required, the service should encrypt the traffic of designated accounts with a public key, and forward it to a write-only archive service.```
This is a silly default behavior. For enterprise I guess it makes sense, but I want to keep my mail local, not shuffle it off to Yet Another Service™. And I certainly want it to SAVE my mail and not delete it by default!
For personal backup/archiving, there's replication to multiple clients, also described on the website.
Someone will create a web service that implements a TMTP client to replicate your account in the cloud. That's fine for many consumers, but must not be the default.
Actually I think I'm not understanding this properly... does the phrase 'messaging service' mean the email service, i.e the server? So the server would not store my mail, but the client would?
I guess the answer is obvious. Sorry, I didn't read this properly. Good work on this!
Its not silly, its just a division of responsbility: delivery vs. dleivery archiving (probably not usually needed outside of enterprise) vs. user reader support & user archiving (the last two out of scope).
Comments
Good idea in theory, but this part:
```To prevent theft of correspondence (in the event of a compromised account or server) the messaging service must store only messages that have not yet been delivered or returned as undeliverable.
Where archiving is required, the service should encrypt the traffic of designated accounts with a public key, and forward it to a write-only archive service.```
This is a silly default behavior. For enterprise I guess it makes sense, but I want to keep my mail local, not shuffle it off to Yet Another Service™. And I certainly want it to SAVE my mail and not delete it by default!
For personal backup/archiving, there's replication to multiple clients, also described on the website.
Someone will create a web service that implements a TMTP client to replicate your account in the cloud. That's fine for many consumers, but must not be the default.
Actually I think I'm not understanding this properly... does the phrase 'messaging service' mean the email service, i.e the server? So the server would not store my mail, but the client would?
I guess the answer is obvious. Sorry, I didn't read this properly. Good work on this!
Yes the client stores your mail, and the messaging service (aka server) simply relays it between clients.
Thanks for the encouragement!
Follow mnm: https://twitter.com/mnmnotmail :-)
Its not silly, its just a division of responsbility: delivery vs. dleivery archiving (probably not usually needed outside of enterprise) vs. user reader support & user archiving (the last two out of scope).