I setup cloud server with encrypted volumes, I installed mail server with SMTP and IMAP, I allow only SSL connections (the latest TLS).
I was wondering if this configuration will prevent from others reading my emails - intentionally or unintentionally.
To boot the machine, I need to enter the password. So it's impossible to read my email from snapshots. Also, it's impossible to sniff it out. However it is possible to read it from the memory of virtual machine.
Is there any common way utilized by goverments, isps and cloud providers (except for monitoring tcp connections), that could compromise the security for all the time (assuming that the clients do check certificates and the server is using firewall with selinux and so on)? I mean technology built-in virtualisation which would monitor data processing and memory read and writes? Is there any way to protect from these assuming this machine is running XEN and it's 6 core Xeon launched Q1 2010? (Nahalem based).