It seems that unless there's an active IMAP connection, emails are written in plaintext to a temporary location and are only added to the encrypted mailbox once a new IMAP connection starts. This is because you use symmetric encryption and need the user's password.
Have you considered incorporating public key encryption in your architecture and if so, why did you choose not to?
Comments
Cool product!
Question regarding encryption:
It seems that unless there's an active IMAP connection, emails are written in plaintext to a temporary location and are only added to the encrypted mailbox once a new IMAP connection starts. This is because you use symmetric encryption and need the user's password.
Have you considered incorporating public key encryption in your architecture and if so, why did you choose not to?