Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 4 down vote favorite
1

I'm fed up by spam and would like to have an email address that will only deliver mails signed by users I declared trusted. Some kind of purgatory for mails the signatures of which are trustworthy by a Web of Trust connection would of course also be a nice feature. Is there a either provider that offers this service, or at least a (preferably FOSS) mail server setup for self-hosting?

share|improve this question
2  
Unless you often get e-mails from people you don't know yet and are in your WoT, setting up a white-list on e-mail address will be easier. That being said, most OSS MTA and MDA do allow scripting, so in theory you should be able to hook it up to gpg. – Hubert Kario Sep 9 '12 at 15:39
@HubertKario Good point, although the WoT is probably the closest thing to some intelligent friends-of-friends / colleagues-of-colleagues etc. whitelist... (Now please don't tell me I should use Facebook for that) – Tobias Kienzler Sep 9 '12 at 16:00
1  
but then you'd have to have friends that actually use gpg and have cross-signed their public keys. From my experience, it's not really common in IT/security circles, let alone geeks or general population. You may have different friends/colleagues though... – Hubert Kario Sep 9 '12 at 16:04
2  
@TobiasKienzler No, it won´t. Will convice them of not writing any email to you though. – droope Sep 13 '12 at 21:34
1  
Hi Tobias, shopping / recommendation questions are not really a good fit for SE. Do you want to ask something more like, how could a good solution solve this? – AviD♦ Oct 24 '12 at 19:55
show 4 more comments

2 Answers

up vote 2 down vote accepted

Any Unix MTA can pipe mail to a script. Run signature checks on the server and if the script returns true, pass the mail on. See your favorite MTA's documentation for an explanation of how. This is the same kind of setup used to create listserves.

share|improve this answer
Thanks for the edit, that's probably the more correct question to ask. (Accepted answer, though an actual example configuration with scripts would of course steal the checkmark :-P ) – Tobias Kienzler Oct 25 '12 at 5:37
up vote 0 down vote

We are currently in development of this functionality as a Cloud Application that will run in your private cloud on the Jumpto.com Internet Security platform. Secure Mail will eradicate spam by making your email address unresolvable on the normal Internet by unauthorized users. More information on the product will be released upon roll out in the next few weeks.

share|improve this answer
2  
Sounds interesting, please update your answer and drop a comment when that happens. Also, welcome to security.SE! But also be aware of the faq entry on promotion: security.stackexchange.com/faq#promotion – Tobias Kienzler Oct 24 '12 at 18:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.