Hot answers tagged encryption
Agree with @Greg. Those attacks are possible. However the MTAs can be configured(depending on the MTA) to use "mandatory TLS", not "opportunistic TLS". What this means is that TLS and only TLS is used(this also includes STARTTLS) for the email transactions. If the remote MTA doesn't support STARTTLS, the email is bounced.
Your assumptions are correct. The difference between using a ZVOL and file-backed md(4), from the user point of view, is not that big. Mostly that ZVOL will always be there, and the md disks need to be reattached after reboot. As for growing - both ZVOL and file-backed md disks "grow" automatically, ie are sparse. The geli manual recommends overwriting ...
Only top voted, non community-wiki answers of a minimum length are eligible